Security, in plain language

Short write-ups about what actually goes wrong in AI-built apps, and what to do about it.

Page 5 of 5

Which API keys are safe in your frontend, and which aren't

Your Supabase anon key is supposed to be public. Your service_role key is not, and it ignores every rule you set. Here is how to tell them apart.

Everything here is written by a security expert, and aimed at whoever pressed deploy.