Supabase RLS Scanner
Test your Supabase Row Level Security policies. Find permission bugs, detect tables without RLS, and audit storage bucket access before they reach production.
Security Checks Performed
RLS Policy Audit
Scan for common RLS security issues like missing policies and overly permissive rules.
Coverage Report
See what each role (anonymous, authenticated, service) can access in your database.
Storage Buckets
Test storage bucket RLS policies for unauthorized access.
Role Testing
Test policies with different user roles and JWT claims.
CRUD Operations
Test all SELECT, INSERT, UPDATE, DELETE operations against your policies.
CI/CD Ready
All operations use safe, rolled-back transactions. No data is persisted.