Supaguard

Meet Supaguard

Supaguard checks Supabase-powered applications for exposed credentials, weak row-level security rules, and publicly accessible sensitive data. It examines a site's JavaScript bundles, identifies relevant credentials, and reports which database tables or operations may be reachable through them. Findings are presented in a security report with suggested fixes.

Developers can start with an individual scan or use paid monitoring for multiple projects. Scheduled checks, score history, email alerts, and webhook integrations help teams notice changes over time. The platform also supports deployment-pipeline checks and downloadable reports. Supaguard focuses on the access controls and API behavior of Supabase applications rather than treating every site as the same generic scanning target.