AI App Security & Code Review Expert

Lovable + Supabase Developer Needed for Security & Code Review of AI Application

Project Description

I am building an AI-powered application using Lovable, React and Supabase.

The application handles private and potentially sensitive user-generated content. Before launching the application, I am looking for an experienced developer to perform an independent technical and security review.

This is initially a review/audit project. If the cooperation goes well, there may be additional paid work to fix identified issues and help prepare the application for production.

What I Need Reviewed

Please review:

- Supabase Authentication
- Row Level Security (RLS) policies
- Database permissions and user data isolation
- Storage of private user content
- Account and data deletion
- API security
- API keys, environment variables and secrets
- AI API integration
- Frontend/backend separation
- Potential data leaks
- General security vulnerabilities
- Lovable-generated React code quality
- Production readiness

I would also like recommendations for improving the architecture where necessary.

Required Experience

Please apply only if you have experience with:

- Lovable or similar AI-generated applications
- React / TypeScript
- Supabase
- PostgreSQL
- Supabase RLS
- Authentication and authorization
- API security
- Secure handling of sensitive user data

Experience with AI/LLM APIs and subscription-based SaaS applications is a plus.

Deliverables

At the end of the review, I would like:

1. A written list of identified security and technical issues
2. Severity level for each issue (critical / high / medium / low)
3. Recommended solution for each issue
4. Identification of anything that should be fixed before launch
5. A short assessment of whether the application architecture is suitable for production

Please do not make major changes to the application without discussing them with me first.

Initial Scope & Budget

This is initially a small paid review.

Budget: approximately €100–250 fixed price, depending on experience and proposed scope.

If the review goes well, I may hire the same developer separately to implement the recommended fixes and perform a final pre-launch review.

When Applying

Please answer these questions:

1. Have you worked with Lovable applications before?
2. How much experience do you have with Supabase RLS?
3. Have you performed security reviews of applications that store sensitive/private user data?
4. Can you provide an example of a similar project?
5. What exactly would you review for the proposed fixed price?
6. How long would the review take?

More information about the application will be provided privately to the selected developer. Confidential project details should not be included in the public discussion.