Launching today
PatchAndShip Free Check
We fix security holes in Lovable and Bolt apps for you
2 followers
We fix security holes in Lovable and Bolt apps for you
2 followers
Built your app with Lovable or Bolt and not sure what it shows every browser? Paste its URL. The free check reads what any browser gets (homepage, JS, headers) and flags leaked keys and missing headers. It doesn't test your database. No signup.
Hi Product Hunt, I'm Mike, and I run PatchAndShip, a security-fix service for apps built with Lovable, Bolt, Replit and Cursor that use Supabase. We don't just point out holes. We fix them, and a human engineer approves every change. (We're not affiliated with Supabase.)
Supabase plans to change how new tables work on existing projects from Oct 30. Once the change reaches your project, a new table in the public schema will need an explicit grant before your app can reach it. Tables you made before then will keep their current access and RLS, whatever those are today, so they're worth checking.
What the free check does: paste your app's URL and it loads your homepage, up to 10 of its JavaScript files and the response headers, like a visitor's browser would. It flags leaked keys or secrets, missing security headers and storage links. No signup. Results aren't stored. A short log (domain, time, issue types) is kept for a day. https://patchandship.com/check.html?utm_source=producthunt&utm_medium=launch&utm_campaign=ph-launch-1029&utm_content=maker-comment
What it doesn't do: it doesn't query your database or log in. It can't see your grants or RLS rules, so it can't tell you whether you're ready for Oct 30. Plain steps for that: https://patchandship.com/guides/supabase-42501-after-oct-30?utm_source=producthunt&utm_medium=launch&utm_campaign=ph-launch-1029&utm_content=maker-comment-guide
If you'd rather we check your tables, grants and RLS and fix what we find:
$49 Database Check: read-only, report within 24h of working access or a full refund. $149 / $249: within 48 hours of working access or a full refund.
It's a quick summary, not a full audit. I'd love feedback: what did it miss, and what confused you?
For launch day: a free 15-minute look at your Supabase database rules for the first 10 apps. Reply here or email patchandship@gmail.com and we'll send the read-only steps. No passwords or keys needed.