Genuinely wild times wherein we don't have to be an engineer to ship a real product anymore. Describe what you want, and Lovable, Bolt, Claude and others help build it. Coding stopped being the bottleneck. And that's beautiful. But there's a quiet catch. The tools that build your app don't automatically secure it. One misconfigured Supabase setting can leave your users' data exposed to complete strangers through a browser. No hacking. No sophisticated exploit. Just an open door. And this isn't hypothetical. Escape's 2025 research scanned 5,600 publicly accessible vibe-coded apps and found 2,000+ vulnerabilities, 400+ exposed secrets, and 175 instances of exposed personal data, including medical and financial information. Here's what makes this more interesting: the platforms themselves make the responsibility clear. Supabase secures its infrastructure, but you're responsible for securing your application: RLS, access controls, API keys and data permissions. When serious RLS weaknesses were reported in Lovable-generated apps under CVE-2025-48757 in 2025, the supplier disputed the finding on the grounds that customers were responsible for protecting their application data. Fair enough. But if its my responsibility, I need a way to actually check. Security shouldn't become the new bottleneck, the way coding no longer is. So I built MakerGuard - https://midnightbuilds.fyi/makerguard/ It tests your Supabase-powered app through the eyes of a stranger and shows you what it can actually access, what needs fixing, and what couldn't be verified. No signup. Read-only. No secret keys. No stored scan results. Only public app URL to start with. And it's free. An app built by 1 person deserves the same opportunity to protect its users as one built by a team of 10. MakerGuard is early (really early), and I want to build it with the people who need it. If you've built something with Supabase & have no idea whether your users' data is actually accessible to strangers, run it through MakerGuard. Tell me what it found, where it fell short, and what you'd want it to do next.   submitted by   /u/swati425 [link]   [comments]