Constructive Releases Safegres to Audit Postgres Security in CI
San Francisco – November 06, 2026 -- Constructive has released Safegres, an open-source verifier that grades which roles can reach which rows in a live PostgreSQL database, after recent scans found 24,664 of 159,041 Lovable-built projects serving records to anonymous visitors.
Safegres audits row-level security (RLS) policies and grants in read-only mode. It never touches application data or changes anything, so teams can run it against a production copy or automatically on every database change.
Scans found thousands of AI-built apps exposing Postgres data
On Nov. 2, Hamburg security firm Crissy Field and the German newspaper Handelsblatt scanned 159,041 projects built with AI app builder Lovable. They found 24,664 sites whose Postgres databases served records to anonymous visitors, 7,403 of them exposing email addresses.