guides
Short, practical checks for apps built with AI tools. Every menu name, setting and command is checked against the official docs, with sources at the bottom of each guide.
A practical pre-launch checklist for Lovable apps: run the Quick and Deep scans, audit RLS policies with two SQL queries, and keep API keys out of the browser.
What to check before launching a Bolt.new app: the database Security Audit, "RLS Policy Always True" warnings, VITE_ env variables, and exposed keys.
How to find leaked API keys in your repo and JS bundle, rotate them in the right order, keep .env away from Cursor and Claude Code, and clean git history.
Supabase RLS explained for apps built with AI tools: grants vs policies, the four-policy owner pattern, testing with supabase test db, and common mistakes.
Security checklist for apps built on Replit or with v0 and deployed on Vercel: Secrets, production app secrets, NEXT_PUBLIC_ variables, and environment scoping.
next step
Grab the free Lockdown Pack (security rules for Cursor and Claude Code plus a pre-launch checklist), or have us check the whole app for a fixed $99.