Defencecore Supabase Scanner

About

A free scanner that connects to a Supabase project through read-only OAuth and inspects Postgres catalogue and Storage metadata for access-control mistakes: tables without Row Level Security, API grants on unprotected tables, missing or unconditional policies, and publicly readable Storage buckets. It never requests a service-role key, database password or personal access token, does not read application rows, and returns findings in the browser plus an emailed report.