Blog

Security for people who build with AI, in plain words.

all api-keys checklist database launch leaks supabase

October 12, 2026 · 2 min read

Your API key is probably sitting in your JavaScript

Anything your browser downloads can be read by anyone. Here is how AI-built apps leak OpenAI, Stripe and Supabase keys, and how to fix it in ten minutes.

October 8, 2026 · 2 min read

A 10-minute security checklist before you launch your AI-built app

Seven checks that catch the most common ways Lovable, Cursor, Bolt and Replit apps leak data, with a plain-English fix for each.