Cenk KURTOĞLU

Security reviewer for AI-built Supabase apps. I find the leaks a linter cannot see: cross-tenant policy conflicts, unisolated joins, service-role key exposure, write-without-read holes. Free read-onl

Joined on Jun 21, 2026 https://cenkkurtoglu.com/supabase-rls-security-audit

Work

Independent Next.js + Supabase reviewer and production bug-fix developer

Pinned

Cenk KURTOĞLU

Aug 7

Before You Pay for a Next.js or Supabase Bug Fix, Capture These 6 Signals

#nextjs #supabase #debugging #webdev

3 min read

Cenk KURTOĞLU

Sep 24

58 of 154 public Supabase apps had a working service_role key in git

#supabase #postgres #security #webdev

3 min read

Want to connect with Cenk KURTOĞLU?

Create an account to connect with Cenk KURTOĞLU. You can also sign in below to proceed if you already have an account.

Create Account

Already have an account? Sign in

Cenk KURTOĞLU

Sep 18

Supabase RLS: a small, evidence-first pre-launch check

#supabase #postgres #security #webdev

2 min read

Cenk KURTOĞLU

Sep 8

October 30, 2026: the Supabase change that will 42501 your next deploy - and the leak that was already there

#supabase #postgres #security #webdev

4 min read

Cenk KURTOĞLU

Sep 2

Supabase RLS returns rows it shouldn't (or throws 42501): the 6 real causes

#supabase #postgres #security #webdev

2 min read

Cenk KURTOĞLU

Aug 15

The service_role Key Hiding in Your .mcp.json — the AI-Vibe-Coder Secret Leak

#supabase #security #postgres #webdev

5 min read

Cenk KURTOĞLU

Aug 15

The Supabase Security Checklist to Run Before You Launch

#supabase #postgres #security #webdev

6 min read

Cenk KURTOĞLU

Aug 15

NEXT_PUBLIC_ and Supabase: Which Env Variables Are Safe to Expose?

#supabase #nextjs #security #webdev

5 min read

Cenk KURTOĞLU

Aug 15

You Committed .env to GitHub: What to Rotate (Supabase + Next.js)

#supabase #nextjs #security #postgres

6 min read

Cenk KURTOĞLU

Aug 15

Test Your Supabase RLS Policies Locally: A Free SQL Harness

#supabase #postgres #security #webdev

5 min read

Cenk KURTOĞLU

Aug 15

Supabase RLS with auth.uid() not working? Causes and fixes

#supabase #postgres #security #webdev

6 min read

Cenk KURTOĞLU

Aug 15

Is my Supabase anon key exposed? What's actually safe (and what isn't)

#supabase #postgres #security #webdev

5 min read

Cenk KURTOĞLU

Aug 14

Your AI Coding Tool Is Committing Your Supabase service_role Key

#supabase #security #postgres #webdev

6 min read

Cenk KURTOĞLU

Aug 14

Supabase RLS Not Working? Fix It by Symptom (Correct SQL Inside)

#supabase #postgres #security #webdev

5 min read

Cenk KURTOĞLU

Aug 13

You shipped a Supabase app with AI. Here are the 4 security holes it probably has (and the 5-minute fixes)

#supabase #postgres #security #webdev

5 min read

Cenk KURTOĞLU

Aug 13

New Row Violates Row-Level Security Policy: The Real Fix

#supabase #postgres #security #webdev

4 min read

Cenk KURTOĞLU

Aug 12

Supabase Storage Upload Fails With RLS (403: new row violates row-level security policy)

2 min read

Cenk KURTOĞLU

Aug 12

Why Supabase RLS Returns Nothing or 42501 (auth.uid() Is Null on the Server)

3 min read

Cenk KURTOĞLU

Aug 12

7 Ways Your Supabase App Still Leaks Data With RLS Enabled

3 min read

Cenk KURTOĞLU

Aug 12

Test your Supabase RLS before you ship: a free red/green fixture and the 9 SQL checks a linter cannot run

#supabase #postgres #security #webdev

4 min read

Cenk KURTOĞLU

Aug 7

Your Supabase service_role key is probably in your browser bundle

#supabase #nextjs #security #webdev

5 min read

Cenk KURTOĞLU

Aug 7

Stripe doesn't support my country. Here's how you ship a paid product anyway (2026)

#payments #saas #stripe #webdev

2 min read

Cenk KURTOĞLU

Aug 7

Two SQL queries that tell you whether your Supabase RLS is actually on

#postgres #security #supabase #webdev

6 min read

Cenk KURTOĞLU

Aug 7

Your Supabase service_role key is probably in your browser bundle

#supabase #security #nextjs #webdev

5 min read

Cenk KURTOĞLU

Aug 7

Your Supabase RLS policy passes every test and still leaks

#supabase #postgres #security #webdev

4 min read

Cenk KURTOĞLU

Jul 4

I built an API-callable llms.txt generator after Lighthouse added an audit

#ai #webdev #seo #opensource

2 min read

Cenk KURTOĞLU

Jul 3

If Stripe is not available in your country, check this before rebuilding your SaaS billing

#nextjs #saas #payments #webdev

2 min read

Cenk KURTOĞLU

Jul 3

I will review 5 Next.js SaaS landing/payment flows today

#nextjs #saas #webdev #indiehackers

2 min read

Cenk KURTOĞLU

Jul 3

What 'Production-Ready' Actually Means for a Next.js Template (a Checklist)

#nextjs #webdev #tailwindcss #beginners

3 min read

Cenk KURTOĞLU

Jul 3

Ship a Client Website in a Day: The Single-Config Pattern for Next.js

#nextjs #webdev #freelance #typescript

3 min read

Cenk KURTOĞLU

Jul 3

I Built 20 Production-Ready Next.js + Tailwind Templates — Here's the Architecture

#nextjs #webdev #tailwindcss #typescript

3 min read

Cenk KURTOĞLU

Jul 3

How I Wire Polar MoR Payments In A Next.js SaaS Without Stripe

#nextjs #saas #payments #webdev

3 min read

Cenk KURTOĞLU

Jun 30

Next.js 15 App Router SEO done right: generateMetadata, dynamic sitemaps, and the one-file strategy

#nextjs #seo #webdev #react

6 min read

Cenk KURTOĞLU

Jun 28

23 Production-Ready Next.js 15 + Tailwind Templates (Live Demos You Can Click)

#nextjs #tailwindcss #webdev #react

2 min read

Cenk KURTOĞLU

Jun 23

New Technical Article

#nextjs #react #saas #webdev

2 min read

Cenk KURTOĞLU

Jun 23

Top 5 Modern Next.js SaaS Templates to Launch Your Startup in 2026

#nextjs #react #saas #webdev

2 min read

Cenk KURTOĞLU

Jun 23

Untitled

#nextjs #webdev

1 min read

Cenk KURTOĞLU

Jun 23

Untitled

#nextjs #webdev

1 min read

Cenk KURTOĞLU

Jun 22

10 Best AI Tools for Shopify Store Owners in 2026

#shopify #ecommerce #ai #marketing

2 min read

Cenk KURTOĞLU

Jun 22

Why Static Product Photos Are Killing Your Shopify Sales (And How to Fix It)

#shopify #ecommerce #marketing #webdev

2 min read

Cenk KURTOĞLU

Jun 22

How I Automated My Shopify Store's Video Ads Using AI (And Increased Conversions by 40%)

#shopify #ecommerce #ai #webdev

2 min read

Cenk KURTOĞLU

Jun 22

How I add Polar (Merchant of Record) + Stripe to any Next.js app in 10 minutes — without an SDK

#nextjs #stripe #payments #webdev

2 min read

Cenk KURTOĞLU

Jun 22

What 'production-ready' actually means for a Next.js template - a single-source-of-truth architecture

#showdev #nextjs #tailwindcss #webdev

3 min read

Cenk KURTOĞLU

Jun 22

Top 5 Modern Next.js SaaS Templates to Launch Your Startup in 2026

#nextjs #react #saas #webdev

2 min read

Cenk KURTOĞLU

Jun 22

What "production-ready" actually means for a Next.js template — a single-source-of-truth architecture

#showdev #nextjs #tailwindcss #webdev

4 min read

Cenk KURTOĞLU

Jun 22

How I add Polar (Merchant of Record) + Stripe to any Next.js app in 10 minutes — without an SDK

#nextjs #stripe #payments #webdev

3 min read

Cenk KURTOĞLU

Jun 21

I built 20 production Next.js 15 templates: the stack, patterns, and lessons

#nextjs #webdev #typescript #tailwindcss

3 min read

2 Week Community Wellness Streak

1 Week Community Wellness Streak

Writing Debut

Want to connect with Cenk KURTOĞLU?