Supabase RLS Security Scanner

Detect Supabase instances on web pages and scan for Row Level Security (RLS) vulnerabilities

As of June 2026, Supabase RLS Security Scanner has 10 users in the Productivity category.

Usersno change0%
10
10
Ratingno change0%
— reviews
Reviewsno change0%
Version
1.0.0
Manifest V3

History

7 snapshots

Tracking since May 4, 2026.

10.6461.3599999999999994May 4, 2026Jun 9, 2026
View as table
DateUsersRatingReviewsVersion
May 4, 20261.0.0
May 9, 20261.0.0
May 14, 202621.0.0
May 20, 202641.0.0
May 27, 202661.0.0
Jun 3, 202651.0.0
Jun 9, 202661.0.0
Now101.0.0

Permissions & access

Permissions
activeTabstorage
Host access
https://*.supabase.co/*, <all_urls>

Screenshots

Supabase RLS Security Scanner screenshot 1

About

The Supabase RLS Security Scanner automatically detects Supabase instances on any webpage and tests tables for Row Level Security (RLS) misconfigurations.

Key Features:
🔍 Auto-Detection: Automatically finds Supabase URL and keys in network requests and page content.
🛡️ RLS Scanning: Tests if tables are readable without authentication (Anon role).
⚡ RPC Function Analysis: Discovers and assesses exposed RPC functions for risk.
🎯 Data Exposure Checks: Identifies tables leaking sensitive data.
📊 Real-time Results: View findings directly in the extension popup.

Privacy & Security:
Local Only: All scanning is performed locally in your browser.
No Data Collection: No data is sent to external servers.

This tool is intended for developers and security researchers to audit their own Supabase applications.

Technical

Version
1.0.0
Manifest
V3
Size
80.23KiB
Min Chrome
88
Languages
1
Featured
No

Metadata

ID
kohapagohfbmckgcfcnoakpkbfoemdno
Developer ID
uc70ca49ef05405420ac5ae5e8b830203
Developer Email
[email protected]
Created
May 3, 2026
Last Updated (Store)
May 3, 2026
Last Scraped
Jun 9, 2026
Website

Data sourced from the Chrome Web Store · last verified Jun 9, 2026.