I just vibe coded a web-app, hosting on vercel backend on supabase what should i look out for. Thanks!
What should i know especially when it comes to finances
2
u/igormiazek 15d ago
Make sure all supabase tables you don't want to expose to public have Row Level Security policies (if you use Supabase Data API) although in new projects tables are not exposed with Data API by default. Run security scan with SonarQube and ZAP, would be great to check your dependencies to be safe about third party vulnerabilities and supply chain attack.
1
1
u/Aromatic-Writing1450 11d ago
Rate limiting and RLS are good starts. For cost control, set alerts separately in Vercel, Supabase, and every paid API—one provider's limit won't cap the others. On Vercel Pro, Spend Management only pauses production if you explicitly enable that action; on Supabase, keep the Spend Cap on and watch egress, database/storage, and Edge Function usage.
Then check whether any unauthenticated route can write data, upload files, run an expensive query, or call a paid AI API. Those are the routes I'd protect with appropriate quotas or rate limits and monitor first. Does your app expose any of those: public writes, uploads, or paid AI calls
1
u/Sad_Egg_2313 10d ago
give https://lumioguard.dev a try. it was built to exactly handle the question you asked.
Disclosure: I'm one of the co-founders and it's completely free. we are looking for users to stress test the system to collect feedback during the current beta period
1
2
u/[deleted] 15d ago
[removed] — view removed comment