The full Supabase security audit, then I fix everything it finds.

First I check row level security on every table, what your public key exposes while signed out, storage buckets, edge function auth, rate limits and secrets, and database functions anyone can call. You get a ranked report with the exact fix for each finding.

Then, after your written OK, I take a backup, apply every fix, retest from a signed out browser and a signed in account, and send a before and after summary you can show a customer or investor.

Nothing changes in your project without your OK, and nothing is applied without a backup first.