Samuel

I'm Samuel, known online as Mr. Ballaz (@MrBallaz). I build Ubserve, a security scanner for apps built with AI tools like Cursor, Bolt, Lovable, and Supabase.

Before Ubserve, I did manual security audits, going through apps by hand, checking auth, checking for exposed keys, checking RLS policies one by one. It worked, but it didn't scale, and it wasn't affordable for the average solo builder. Then AI coding tools took off, and I started seeing the same audit findings over and over in apps built with Cursor, Bolt, and Lovable: exposed keys, broken row-level security, open databases, the same mistakes, just faster and more frequent because the apps were shipping faster. I wanted to take what a manual audit actually catches and make it fast and cheap enough that any vibecoder could run it before shipping, not just teams who could afford a consultant. That's what Ubserve is: the manual audit, decentralized and automated, running in under 60 seconds instead of days.

I run Ubserve solo, no agency, no security team, no investors telling me what to prioritize next. That means the roadmap gets built around what actually catches real vulnerabilities, not whatever looks good in a pitch deck.

I built Ubserve, so obviously I think you should use it. But every checklist and comparison on this site is written from what I've actually seen scanning real apps and auditing them by hand, not textbook security theory. Where a manual check or a different tool genuinely covers something Ubserve doesn't do today, I'll say so. Pretending otherwise doesn't help you, and it doesn't get cited by anyone worth being cited by.

I still do manual reviews alongside Ubserve. That's where I catch the patterns worth building into the scanner next, so the tool keeps getting sharper instead of standing still.