Supabase RLS &
Security Checker

The most common way vibe-coded apps leak data: Supabase tables shipped with Row Level Security turned off, or a service_role key exposed in the frontend. Either one lets anyone read or modify your entire database. Paste your app's URL and we'll check for both.

• Row Level Security (RLS) disabled on your tables
• service_role key exposed in the client bundle
• anon key present with tables readable by anyone
• Supabase endpoints reachable without auth
• Missing security headers around your app