Lovable audit: findings
Written for the people who decide
- Sound
The main workflow and screens can be kept as they are.
- At risk
Every signed-in user can read every customer's records.
- Fix first
A service key sits in the code that runs in the browser.
Our engineers read the build with read-only access, so nothing of yours changes, and write up what they find for the people who have to decide.
Written for the people who decide
The main workflow and screens can be kept as they are.
Every signed-in user can read every customer's records.
A service key sits in the code that runs in the browser.
No. The plan is yours to act on, with us or with anyone else.
Read-only access to the Lovable project and its database, and a short call with whoever knows the app best.
No. Changes come afterwards, as a plan you've agreed.
Yes. We prototype in Lovable, and take Lovable-built apps through to production on the same stack as every web app we build.