Denys K.
Lovable & Supabase App Review and Fixes | Security, Speed, AI Costs
Built your app with Lovable, Bolt, Cursor or Replit, and now real people use it? I'll check it for leaks, break-ins and runaway AI bills, tell you in plain English what to fix first, and fix it if you want. Hi, I'm Denys. I've been building software for more than a decade, and as a team lead I review other engineers' code every day. I've reviewed 20+ AI-built apps, and the same problems keep coming back: AI bills that climb, pages that slow down, logins that break. What I check and fix → Supabase RLS: users who can read or change other people's data → secret keys visible in the browser (OpenAI, Stripe, Supabase service_role) → Stripe: "Pro" that turns on without a real payment, webhooks that don't update the plan → AI features with no limit per user, so one person can run up your bill → slow pages and slow database queries → "every fix breaks something else": cleaning up so changes stop breaking things How a review works 1. You give me read access to your code (a GitHub invite or a zip) and your database structure. I send you the queries to export it. 2. I test with my own test accounts, ideally on a copy with fake data. I don't need your database passwords or your customers' data. 3. In 3 business days you get a plain-English report. Every finding is ranked Critical, High, Medium or Low and comes with what it means for your users, a ready-to-paste fix prompt for your tool, and a 2-minute way to check the fix worked. 4. Plus a video walkthrough, and a 30-minute call if you want one. Fix it yourself with the prompts, or I fix it for you at a fixed price. No rewrite unless you want one. Send me a message: what you built it with and what worries you most. If you don't need a review, I'll tell you.
Earnings and projects
An estimate from an earlier read
Earnings, last 30 days
Dotted: longer than usual between two readings. No data since Nov 5, 2026.