Best Practices - App Security

Hi all,

I have noticed on X that a developer who shared their build that they built on Cursor has had their work hacked/tampered with - which is a big shame.

I am inexperienced with WeWeb, so I am asking for more insight on best security practices.

I am definitely going to get some sort of security audit done on each project I build - better safe than sorry.

Any advice is welcome!

What backend are you using?

I am going to use Supabase for my backend

Just don’t use API keys on your front end and enforce proper rls on your tables and you should be good :+1:

Hey Scott!
Here are some resources on security best practices:
1/ Ensure Web Application Security with 4-Step No-Code Best Practices
2/ Securely using API Keys from a Frontend No-code App

Hope this helps :slight_smile:

1 Like

Thank you Ishika - this is perfect :ok_hand:t2:

1 Like

I also run security audits on Weweb projects. Let me know if you’re ever interested.

1 Like