Guides
The mistakes that leak your data
Every guide covers one thing an AI coding tool gets wrong often enough to be worth checking by hand, and exactly how to fix it.
How to Find Exposed API Keys in Your Frontend
Secret keys in your client bundle are public to anyone with devtools. Here is how to find leaked API keys in your frontend and what to rotate first.
Read the guide →How to Fix Supabase RLS (With Copy-Paste Examples)
Row Level Security off means anyone can read your tables with the public key. Here is how to turn RLS on and write safe policies, step by step.
Read the guide →Supabase Security Checklist for Shipping Safe
A pre-launch Supabase security checklist: RLS, owner policies, exposed keys, storage rules and the settings that quietly leak data if you skip them.
Read the guide →