As AI-assisted app creation becomes more accessible, a new cybersecurity review is drawing attention to the importance of secure database configuration. UpGuard identified roughly 16,000 publicly accessible Supabase databases that included varying levels of personal information exposure.
Supabase is widely used by developers to build, host and manage web and mobile applications. The review found that some projects had made information such as names, addresses, phone numbers and, in a smaller number of cases, passwords or authentication tokens available through public settings.
Security remains a shared design priority
The findings underline a key challenge in the era of AI-generated code and rapid "vibe coding": building an app quickly does not automatically ensure that access controls, permissions and database rules are correctly configured. Even when development tools offer secure defaults, each project requires careful review before launch.
Supabase stated that its projects are secure by default and described protection as a shared responsibility between the platform and its users. The company said it provides security tools, improves access controls and contacts customers when potential issues are identified.
For teams using cloud databases, the report reinforces several practical principles: limit public access, apply row-level security rules, protect credentials, test permissions regularly and monitor systems after deployment. These steps are especially relevant for smaller teams and independent creators adopting AI tools to turn ideas into products at speed.
The expanding low-code and AI development ecosystem is making digital creation more inclusive. Pairing that momentum with stronger security-by-design practices could help shape a future where innovation moves faster without compromising trust in the services people use every day.
