Guides
Updated 2026-10-25 · Trustfield
Practical, honest guides for people shipping AI-built apps.
Is your Lovable app secure? 7 checks before launch
A practical pre-launch checklist for apps built with Lovable: keys in the bundle, Supabase tables open to the anon key, payment webhooks, headers, CORS, rate limits and AI prompt injection.
5 min read
Supabase RLS checklist for AI-built apps (2026)
Row Level Security checklist for Supabase apps: enable RLS per table, correct policies, storage buckets, anon vs service_role, security-definer functions, and how to test it in 60 seconds.
6 min read
What a ₹499 security report can and cannot do (vs a pentest)
An honest comparison of an automated external security report and a penetration test: scope, price, time, and exactly when a founder needs which one.
4 min read
Trustfield is an external, read-only review. Not a penetration test and not a certification. Methodology · Security