Security

Secrets & API keys

Keep keys out of your client bundle and git history: the #1 indie leak.

Auth & access control

Lock down who can read and write your data (auth checks + row-level security).

Rate limits & abuse

Stop scrapers, spam signups, and runaway bills before they hit.

Data privacy & policy

Handle user data right and ship a real privacy policy (you need one to launch).

AI safety & cost

Guard prompts, outputs, and spend if your app calls an LLM.

App Store review

Pass review the first time. The rejections that catch founders most.