Is your Supabase data actually safe? Many apps let any signed-in user read or change other people's data without knowing it.

I'm a UK software engineer who builds production apps on Supabase and Postgres. I check every table and function the way an attacker would: row level security on every table, policies that leak other people's rows, server functions that trust ids sent from the app, public keys and storage buckets, and missing rate limits.

You get a plain-English report (what's wrong, how bad, how to fix it) plus the fixes as migrations you can review. I never need your password: invite me to your project and remove me after.