Straight, source-cited writing for founders shipping on Lovable, Bolt, v0, Cursor, Replit, Bubble, and Base44. No scareware, no invented statistics — every incident and number here carries the name of who reported it.
A read-only probe of your public URL, ~48 checks across 9 categories, full verdict with no email — and a plain list of what we deliberately never do.
Read →Diagnose it, write the policy, and verify it actually blocks an anonymous request — the free path first, in your own Supabase dashboard.
Read →Credit where it's due to the platforms — and the structural reason a builder can't be the independent auditor of its own output.
Read →