For apps on Supabase
Supabase problems? We fix them.
Most apps built with Lovable, Bolt and other AI tools keep their users and data in Supabase. When something breaks there, the whole app breaks: nobody can sign in, lists come back empty, or worse, anyone can read everything. We fix the database, the security rules and the login, and explain what we changed.
What we fix
- Row-level security (RLS).
new row violates row-level security policy, empty data for logged-in users, or tables anyone can read. The RLS guide. - "RLS disabled in public" warnings. The Security Advisor is telling you that anyone with your public key can read or change those tables. We turn RLS on and write the rules your app actually needs, so nothing breaks.
- Exposed keys. A
service_rolekey in your website's code gives anyone full control of your database. We move it to the server and replace it. - Login. Users sent to
localhostafter signing in (guide), "Error sending confirmation email" (guide), Google sign-in errors, sessions that drop. - Edge functions. CORS errors, missing secrets, Stripe webhooks that fail (guide).
- Slow pages. An app that gets slower as users arrive: missing indexes, or security rules that re-run a lookup on every row.
How a job works
- Send the link through the free check-up form, with what's broken in your own words.
- Within 24 hours you get the cause and one fixed price.
- We test every change on a copy first, never straight on your live data. Usually you invite us to your Supabase organization with the Developer role.
- You see it working, then you pay. If we can't fix it, you pay nothing. Remove our access when the job is done.
Prices
Fixed, or you don't pay.Prices in US dollars. You pay after you see it working.
Questions
Do you need my Supabase password?
No, and never send one. Invite us to your organization with the Developer role, then remove us when the job is done.
Will turning on RLS break my app?
It does if you switch it on blindly, which is why so many people turn it back off. We write the rules first, test them on a copy, and only then switch RLS on for real.
Can you check my security without changing anything?
Yes. Ask for a security check in the form. You get a plain list of what is open and the price to close each item.
Are you part of Supabase?
No. We're an independent studio that fixes apps built on Supabase.