WorkBAM Virtual Academy · 2026
Security holes closed before launch
Before
Open
After
Closed at launch
Project facts
- Timeline
- 8 weeks, Mar to May 2026
- Stack
- Supabase, Stripe, Mux
- Now
- Live since May 2026
- Engagement
- Backend build
See it on Contra ↗ (opens in a new tab)Live site ↗ (opens in a new tab)
What was broken
Coleman Ayers coaches basketball and built much of the frontend himself. Underneath, authors were stored as plain text, Stripe data was scattered, and nothing modeled points, habits or video.
What I did
- Rebuilt the Supabase backend for two products: coaches and players
- Stripe billing tested with real transactions
- Mux video behind an approval queue and signed URLs
- A pre-launch audit that found admin tools open without login
What happened after
Both platforms launched with the audit's issues closed, before a user found one.
Next step
The matching offer
Custom web app
From $5,000
Accounts, payments and your data, in one working product.