Stop Supabase data leaks before they happen

The security platform built for Supabase. Scan for exposed keys, weak RLS, leaked PII — then monitor continuously so nothing slips through.

Security Audit Report — Sample Report

Security Audit Report

Overall Score
15/100

Critical Findings
3

High Risk Tables
0

Tables Accessible
13

Table-Level Attack Surface

credit_card
Critical
21 rows
Potentially sensitive columns found:
number

iban_no
Critical
21 rows
Potentially sensitive columns found:
number

How to fix these issues

  • Enable Row Level Security (RLS)
    Every table must have RLS enabled to prevent unauthorized data access.
  • Secure Your Frontend Keys
    Only use the anon key in client-side code. Never expose your service_role key.
  • Use View Restrictions
    Expose views instead of raw tables wherever possible.

Think like an attacker. Fix like an engineer.

Supaguard does what a pentester would — crawls your app, finds leaked credentials, probes your database, and tells you exactly what's exposed.

  1. Discover Leaked Keys

We crawl your JavaScript bundles to find hardcoded Supabase anon keys, service role keys, and JWT tokens that shouldn't be public.

  1. Map the Attack Surface

Using any leaked credentials, we enumerate every table an attacker could read or write. We find the holes in your RLS before someone else does.

  1. Flag Sensitive Data

Regex heuristics detect emails, passwords, credit card numbers (PAN), and other PII/PCI data exposed through weak access controls.

From one-time scan to continuous security

Supaguard Pro transforms security from a checkbox into an always-on monitoring platform.

Multi-Project Dashboard

Monitor up to 5 Supabase projects. See scores, trends, and alerts at a glance from one unified dashboard.

Scheduled Monitoring

Automated daily, weekly, or bi-weekly scans. Get alerted the moment your security posture drops.

Webhook & Slack Alerts

Send security alerts to Slack, Discord, or any webhook. Plus email alerts for score regressions.

Compliance Reports

One-click SOC 2, GDPR, and PCI DSS assessments. Downloadable PDF reports for auditors and stakeholders.

Security Badge

Embed a real-time security score badge on your README or website. Show customers you take security seriously.

CI/CD Integration

Add security scans to your deployment pipeline with GitHub Actions, shell scripts, or a simple curl command.

Score History & Trends

Track your security score over 90 days. Spot regressions instantly with visual trend charts.

Write Permission Detection

Non-mutating probes detect if anonymous users can INSERT, UPDATE, or DELETE — without touching your data.

PCI Leak Detection

Luhn-validated credit card number detection. Flags PAN, CVV, and expiry fields exposed through your API.

Built by security researchers

Recognized by

Recognition for security research/disclosures. Logos are not endorsements.

Built specifically for Supabase

Generic scanners don't understand PostgREST, RLS policies, or anon keys. Supaguard does.

Other Scanners

  • Generic OWASP checks
  • No Supabase awareness
  • Manual one-time scans
  • No RLS policy analysis
  • Enterprise pricing

Supaguard

  • Supabase-native scanning
  • RLS + PostgREST analysis
  • Automated monitoring
  • Compliance reports (SOC2/GDPR/PCI)
  • Starts free, Pro at $12.35/mo

Your Supabase data might be leaking right now

One scan takes 30 seconds. Find out before an attacker does.