Supabase RLS policy examples for common app patterns
Copy-ready Supabase Row Level Security policies for public content, admin roles, insert-only forms and protected columns, plus how to test them before shipping.
Read articleBlog · Guides
Guides for apps built with AI
Plain-language guides for people who built an app with Lovable, Bolt, Cursor, v0 or Replit: finding what broke, making it safe and getting it live.
110 articles · Page 11 of 13
Supabase Row Level Security for Lovable and Bolt apps
How to tell if your Lovable or Bolt app's Supabase data is open to anyone, what Row Level Security does, and how to turn it on safely without breaking the app.
Read article
Supabase service_role key leaked? Your first-hour plan
A step-by-step plan for a leaked Supabase service_role or secret key: replace it, shut the old one off, check what was touched and stop it happening again.
Read article
Supabase Storage: public vs private buckets and signed URLs
When a Supabase Storage bucket should be public or private, how signed URLs work, which storage.objects policies you need and how to fix a wrong bucket.
Read article
Supabase vs Firebase for an app built with AI tools
Supabase or Firebase for an AI-built app: how their databases, security, free tiers and pricing differ, which builders default to which, and how to choose.
Read article
Technical debt in vibe-coded apps: when to pay it down
What technical debt looks like in apps built with Lovable, Bolt, Cursor or Replit, how to spot it, which debts to pay first and how to stop adding more.
Read article
Technical due diligence: what investors look at in your app
What a technical due diligence review checks before investors put money in, from code ownership and security to scalability and team, and how to prepare.
Read article
How to add tests to AI-generated code
Which tests to add first to an AI-built app, how to set up Playwright and Vitest, how to get the agent to write useful tests and run them on every change.
Read article
How to turn your web app into an installable PWA
What a web app needs to be installable on Android, iPhone and desktop: the manifest, icons, an optional service worker, iOS differences and caching traps.
Read articleStill stuck with your app?
Run the free health check on your app's URL, or get the $299 App Rescue Audit: a senior engineer reviews the code and sends you a written report in 2 business days.