Guides

Topics

Every guide sits in one topic. A topic exists only when at least three guides belong there. Payments and model features share a page because each of those subjects has two guides.

• Secrets and API keys

  Guides for keys that end up in the browser, in git, or in a debug route.

  6 guides

• Database and row level security

  Guides for Supabase, Firebase, storage buckets, and Lovable apps that expose rows.

  4 guides

• Auth

  Guides for checks that only exist in the UI, plus IDOR, resets, and Server Actions.

  5 guides

• Deploys and hosting

  Guides for server env vars, preview deploys, security headers, and CORS.

  3 guides

• Payments and model features

  Guides for Stripe webhooks, client-set prices, uncapped model spend, and prompt injection.

  4 guides

• Injection

  Guides for SQL injection, cross-site scripting, and unsafe uploads.

  3 guides

• Launch checks

  Guides for dependency audits, privacy pages, and Cloudflare's security-audit skill.

  3 guides