Jul 5, 2026•9 min read
I Scanned 66 AI-Built Apps: 4 in 10 Supabase Backends Had a Readable Table
A data report on 66 live apps built with Lovable, Bolt, Cursor, base44, and Tempo. 41% of the Supabase-backed apps had at least one table anyone could read with the public anon key. Methodology, findings, and a 60-second self-check.
vibe coded app securitysupabase rls exposedai built app data leak