Pricing

from $4.65 / 1,000 security findings

⚡ Convex Security Scanner - Find Public Leaks

Probes a public Convex deployment for queries that return data without auth. Convex queries are public-by-default unless you check auth inside the handler. Returns counts + reproducer.

Pricing

from $4.65 / 1,000 security findings

Rating

0.0

(0)

Developer

Renzo Madueno

Actor stats

Bookmarked

Total users

Monthly active users

7 days ago

Last modified

🚀 Strapi Security Scanner - Find Public Leaks

renzomacar/strapi-security-scanner

Probes a public Strapi instance for misconfigured Public role permissions. Detects content-types readable without auth via /api/{collection}. Returns counts + curl reproducer. Counts only.

Renzo Madueno

🧭 Directus Security Scanner - Find Leaks

renzomacar/directus-security-scanner

Probes a public Directus instance for misconfigured Public-role permissions. Detects collections readable without auth via /items/{collection}. Returns counts + curl reproducer. Counts only.

Renzo Madueno

🗃️ PocketBase Security Scanner - Find Leaks

renzomacar/pocketbase-security-scanner

Probes a public PocketBase instance for misconfigured collection rules. Detects collections readable without auth via /api/collections/*/records. Returns counts + curl reproducer. Counts only, no data exfiltrated.

Renzo Madueno

📦 Payload CMS Security Scanner - Find Leaks

renzomacar/payload-security-scanner

Probes a public Payload CMS instance for collections readable without auth. Default templates leave read access wide open during development.

Renzo Madueno

Supabase RLS Security Scanner - Find Anonymous Data Leaks

renzomacar/supabase-rls-scanner

Supabase RLS security scanner. Probes a public Supabase project for Row-Level-Security misconfigurations and detects tables readable by the anon key - the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated. By Renzo Madueno.

Renzo Madueno

🪺 Nhost Security Scanner - Find Public Leaks

renzomacar/nhost-security-scanner

Probes a public Nhost project's Hasura GraphQL endpoint for tables readable by anon role. Detects the #1 cause of Nhost data leaks: forgotten Hasura permission policies. Returns table-level counts + curl reproducer. Counts only.

Renzo Madueno

🔗 Hasura Security Scanner - Find Anon Leaks

renzomacar/hasura-security-scanner

Probes a public Hasura GraphQL endpoint for tables readable by the anon role. Works for self-hosted, Hasura Cloud, and frameworks on top. Counts only.

Renzo Madueno

🌐 WordPress Security Scanner - REST API User & Draft Leaks

renzomacar/wordpress-security-scanner

WordPress security scanner. Probes the WordPress REST API for endpoints leaking users, plugins, drafts and customer data - the misconfigurations attackers enumerate before a brute-force. 40% of the web runs WordPress. Counts only, no data exfiltrated. Fix guidance included. By Renzo Madueno.

Renzo Madueno

MCP Server Security & Trust Scanner

abhi72/mcp-security-scanner

Audits Model Context Protocol (MCP) servers for security & trust issues: missing auth, SSRF exposure, secret leaks, prompt-injection risk, and error handling. Get a scored (A-F), shareable report before connecting any MCP server to your AI agents.

Abhishek Kumar

Stack Overflow Scraper — Q&A, Tags, All 170 Sites | No Auth

bovi/stack-exchange-scraper

Scrape questions, answers, and users from Stack Overflow and all 170+ Stack Exchange sites via the official public API. No auth needed. Filter by tags, search queries, or question IDs. Pay per result.