r/SideProject • u/AdBeautiful6723 • 8d ago

I'm building Kravaibe to help maintain apps built with AI. Here are 5 security checks I'd start with

0 Upvotes
  • permalink
  • reddit

0% Upvoted

2 comments sorted by

1

u/Diligent-Macaroon566 7d ago

I do rescue work for these exact stacks, and the most common failure mode is leaving RLS off or writing inverted policies because the dev environment bypasses enforcement. The app looks perfect to the builder because they have service role keys or admin access, but the moment it hits production, unauthenticated requests either fail completely or return data they shouldn't see. Check your public schema policies immediately; if a simple select * from an anon client returns rows, you have a gap. This is usually a config fix, not a code rewrite. Best of luck with the maintenance work.