For Lovable
Hack your Lovable app before someone else does.
Apps built with Lovable ship fast. These are the problems we check for first.
Common risks
- Supabase tables shipped without row-level security
- Service-role keys pasted into frontend code
- Public storage buckets
Checks that matter most
- ERT-BAAS-001Supabase table readable by anonymous usersCritical
- ERT-SECRETS-002Supabase service_role key in clientCritical
- ERT-BAAS-008Supabase Storage bucket public or listableHigh
Emerald Red Team isn't affiliated with or endorsed by Lovable.