You will get Your Supabase auth and RLS policies audited, fixed and locked down
Project details
Row-level security either exists on a table or it doesn't, and that's all an automated scan checks. It cannot tell whether a policy actually restricts anything. A table with RLS enabled and one using (true) policy passes every scanner and is still readable by anyone with a browser. That exact pattern is CVE-2025-48757, which found 170 production Lovable apps with fully exposed databases.
Most sellers here know Supabase. I've designed permission systems from scratch, twice: a database access platform now running in production at a company in Paris, and my own policy engine with field-level and record-level rules and a tamper-evident audit trail. Supabase RLS is Postgres row-level security. I read the model, not just the syntax.
Then I try to break it. I create two accounts, sign in as one, and attempt to read, delete and forge the other's data with your public key. You get the screenshots showing it fail. Nobody else in this category shows you that.
If Supabase's own Security Advisor already flagged something, I'll say so in the report and tell you it was free. You're paying me for the eight things it can't see.
Most sellers here know Supabase. I've designed permission systems from scratch, twice: a database access platform now running in production at a company in Paris, and my own policy engine with field-level and record-level rules and a tamper-evident audit trail. Supabase RLS is Postgres row-level security. I read the model, not just the syntax.
Then I try to break it. I create two accounts, sign in as one, and attempt to read, delete and forge the other's data with your public key. You get the screenshots showing it fail. Nobody else in this category shows you that.
If Supabase's own Security Advisor already flagged something, I'll say so in the report and tell you it was free. You're paying me for the eight things it can't see.
What's included
| Service Tiers |
Starter
$85
|
Standard
$185
|
Advanced
$320
|
|---|---|---|---|
| Delivery Time | 2 days | 4 days | 7 days |
Number of Revisions | 1 | 2 | 2 |
Design Customization | - | - | - |
Content Upload | - | - | - |
Responsive Design | - | - | - |
Source Code | - | - | - |
Optional add-ons
You can add these on the next page.
Fast Delivery
+$45 - $60
30-min findings walkthrough call
+$40
Follow-up re-check after 30 days
+$70Frequently asked questions
1 review
(1)
(0)
(0)
(0)
(0)
This project doesn't have any reviews.
DF
Dan F.
Apr 25, 2025
Freelance Web Developer Needed – Minor Edits & Site Launch (6 Websites)
good quality work
About Alex
Full-Stack Web Application
Pitesti, Romania - 6:34 am local time
Steps for completing your project
After purchasing the project, send requirements so Alex can start the project.
Delivery time starts when Alex receives requirements from you.
Alex works on your project following the steps below.
Revisions may occur after the delivery date.
Access confirmed, scope checked
I confirm read access to your project and count the tables to make sure the package fits. If you're over the limit, I tell you before starting, not after.
Baseline: Supabase Security Advisor
I run Supabase's own Security Advisor first and screenshot the result, so you know exactly what you were already being told for free, and what you're actually paying me for.