📰 Dev.to · Perufitlife

19 articles · Updated every 3 hours · View all reads

All Articles 78,653 Blog Posts 103,805 Tech Tutorials 19,168 Research Papers 16,904 News 13,538 ⚡ AI Lessons

10 free security scanners for the most popular BaaS platforms (2026 edition)

Across 100+ audits: 22% of Supabase, 23% of Firebase, and most Strapi/Directus/Payload installs leak data anonymously. Here are 10 free scanners (one per BaaS)

Dev.to · Perufitlife 3w ago

I added a $29 tripwire next to my $99 security audit — Hormozi math on solo dev offers

100 free runs → 5 expressed interest → 0.5 buy $99 (LTV $66). Add a $29 tripwire: 100 → 5 → 3 buy $29 → 1 upgrades to $99 → 1 signs up for $29/mo (LTV $302). 4.

Dev.to · Perufitlife 3w ago

I shipped 8 BaaS security scanners on Apify in 9 days — the single-file pattern that made it possible

Every BaaS has the same RLS/permissions footgun. I built a scanner for each one (Supabase, Firebase, Strapi, Directus, Payload, PocketBase, Appwrite, Nhost) usi

Dev.to · Perufitlife 4w ago

I shipped a live integration sandbox in 90 minutes instead of taking the partnership call. It changed the conversation.

Instead of taking a partnership call, I built and shipped a live integration sandbox in 90 minutes. The conversation flipped from 'show me what this looks like'

Dev.to · Perufitlife 🔐 Cybersecurity ⚡ AI Lesson 4w ago

I shipped a public Apify actor that scans Supabase projects for RLS leaks (took 90 min, found a 895-record leak on the first real test run)

Just shipped a new public Apify actor: Supabase RLS Security Scanner. What it does: paste your...

Dev.to · Perufitlife ☁️ DevOps & Cloud ⚡ AI Lesson 4w ago

I scanned 30 Supabase repos this morning and found 3 production-grade leaks (one with service_role committed)

TL;DR This morning I ran a wider sweep of public GitHub repos that import...

Dev.to · Perufitlife 4w ago

I expanded my niche AI factory from 9 to 15 generators in under an hour

Yesterday I wrote about a 2-hour panic-build: 9 niche AI generators shipped on one factory backend...

Dev.to · Perufitlife 4w ago

I shipped 9 AI niche generators in 2 hours after my generic SaaS got 0 sales (the factory pattern)

After 24 hours of trying to sell a generic "AI text humanizer" (0 sales), I sat down and did what I...

Dev.to · Perufitlife 📋 Product Management ⚡ AI Lesson 4w ago

I shipped 5 things around my product in 90 minutes — MCP server, GitHub Action, 3 SEO landings

I shipped aitells (free AI text detector + paid humanizer) yesterday. Today I shipped 5 more things...

Dev.to · Perufitlife 4w ago

I found 3 silent revenue-leaking bugs in my SaaS in 45 minutes (and the meta-lesson)

I run a small aviation SaaS ($45 MRR, 3 paying customers, 75% churn). This morning I decided to...

Dev.to · Perufitlife 4w ago

How I shipped the rewriter side of an AI tell detector in 30 minutes (Claude + Next.js + Vercel)

Yesterday I shipped a free detector for the 12 most reliable AI writing fingerprints. The story...

Dev.to · Perufitlife 4w ago

I built a free AI tell detector after my own Reddit account got 2 'all comments are AI generated' callouts in one day

In 24 hours my Reddit account picked up: 3 ModTeam removals 2 public callouts of "all comments are...

Dev.to · Perufitlife 4w ago

I shipped 5 BaaS security auditors in one day — keyless `npx --discover` mode for Supabase, PocketBase, Appwrite, Firebase, and Nhost

The story A week ago I built supabase-security, a small Node.js auditor that scans...

Dev.to · Perufitlife 4w ago

I built a Supabase security tool, then found 14 critical leaks in my own production CRM

I've been working on an open-source security auditor for Supabase projects for the last few weeks...

Dev.to · Perufitlife 1mo ago

I scanned 35 random Firebase projects from GitHub. 23% leak user data anonymously.

I picked 35 random Firebase project IDs from public GitHub repos this morning and probed each for...

Dev.to · Perufitlife 1mo ago

I built the same security auditor 5 times this week — once each for Supabase, PocketBase, Appwrite, Hasura/Nhost, and Firebase. Here is what I learned.

Five days ago I shipped a Supabase security auditor. Today I shipped the fifth in the family —...

Dev.to · Perufitlife 1mo ago

I built the same security auditor twice this week — once for Supabase, once for PocketBase

What ports across BaaS auditing patterns, what doesn't, and where I drew the line on active probing.

Dev.to · Perufitlife 1mo ago

I scanned my own Supabase project and found 17 tables anyone could read with the anon key

I run two SaaS products on Supabase. I've been on the platform for over a year. I'd like to think I...

Dev.to · Perufitlife 1mo ago

How I Built a 12-Tool MCP Server for AI Agents in 4 Hours (and What It Taught Me About 2026 Scraping)

The Model Context Protocol (MCP) standard is becoming the default way to expose tools to LLMs in...