Supabase CISO Bill Harmer and Security Engineer Etienne Stalmans share how security is built into every layer of Supabase. From Row Level Security to pgTAP testing, learn how they design systems that move fast and stay secure by default.

Aikido Security

Supabase CISO Bill Harmer and Security Engineer Etienne Stalmans explain how Supabase embeds security at the database layer rather than bolting it on afterward. Key practices include Row Level Security (RLS) to control data access per user, continuous policy testing with pgTAP, and a simple anonymous-vs-authenticated access model. They also warn about AI-generated code silently removing security checks when prompted to 'just make it work.'

Security by Design: How Supabase Builds Fast and Stays Secure

“Just make it work” the dangerous prompt