Guides

Lovable security check

Lovable generates React front-ends from prompts and commonly pairs them with Supabase for the database, auth and storage.

Bolt security check

Bolt (bolt.new, by StackBlitz) builds and runs full-stack JavaScript apps in the browser and can connect Supabase as a backend.

Replit security check

Replit is an online IDE and host; Replit Agent can generate and deploy full apps.

Cursor security check

Cursor is an AI code editor. Apps built with it are deployed wherever you choose, such as Vercel, Netlify, Render or a VPS.

v0 security check

v0 by Vercel generates React and Next.js UI and apps that deploy to Vercel.

Exposed API keys in AI-built apps: how to find and fix them

Why secret keys end up in front-end JavaScript, how to check your app, and what to do if a key has leaked.

Supabase Row Level Security (RLS): the check every AI-built app needs

What the Supabase anon key can do, why RLS matters, and how to verify it before launch.

Missing security headers: CSP, HSTS, X-Frame-Options and more

Which HTTP security headers matter for a small web app, what each does, and how to add them on common hosts.