Home › The ShipMender Weekly
The ShipMender Weekly
A free weekly email for vibe coders and indie builders who want to ship AI-built apps without leaking their users' data.
We'll send one email to confirm first. Then one email a week; unsubscribe any time with one click. We use Resend to store your address and send the newsletter. See our privacy policy.
What's in each issue
- Leak of the week: a real breach or exposure in an AI-built app, and the lesson for your own.
- Security tips for apps built with Lovable, Bolt, Cursor, Claude Code and Supabase.
- Tool news: changes in the platforms you build on that affect security.
- Fix of the week: one practical fix, with a prompt you can paste into your AI assistant.
Every story links to its source. Five-minute read, no hype.
Past issues
16,000 open Supabase databases, and a login page that wasn't. Subscribe to get it first.
Want to know if your app is leaking now?
Don't wait for the newsletter. ShipMender scans your public GitHub repo or live URL for missing Supabase RLS, leaked keys, unprotected routes and more. The summary is free; the full report with fix prompts is £29 incl. VAT.
Run a free scanRelated: Supabase RLS mistakes · Is my vibe-coded app secure?