Supabase Data-Leak Check · $99 · Coming soon

Find out whether your app's database is open to anyone with your anon key.

For apps you own built on Supabase with Lovable, Bolt, v0 or Cursor. I check, passively and with your written permission, whether a service_role key or other secrets are in your front-end, and whether tables and storage buckets can be read or written without the right access. You get a severity-ranked report with exact fixes.

Coming soon Follow @SidShipsAI

What you get

Exposed secrets scan of your public JavaScript bundles and source maps (service_role key, third-party API keys)
Row Level Security review of every table, using the policies you export or read-only dashboard access
Anon-key access test against your own project: what an unauthenticated visitor can read or write
Storage bucket and RPC/function exposure check
Severity-ranked findings with the exact SQL policies or code changes to fix them, as a PDF within 2–3 business days

Owner-authorized apps only: at checkout you confirm you own the app or are authorized to have it tested. Passive and non-destructive: no attacks, no load testing, no attempts on other people's systems, and no data beyond the minimum needed to prove a finding is ever kept.