Firebase Security Scanner — Detect public Firestore/RTDB leaks

Probes a public Firebase project for misconfigured Security Rules. Detects Firestore collections and Realtime Database paths readable without auth — the #1 cause of Firebase data leaks. Returns counts + curl reproducer per finding. Counts only, no data exfiltrated.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Renzo Madueno

Actor stats

Bookmarked

Total users

Monthly active users

5 days ago

Last modified

PocketBase Security Scanner — Find public collection leaks

renzomacar/pocketbase-security-scanner

Probes a public PocketBase instance for misconfigured collection rules. Detects collections readable without auth via /api/collections/*/records. Returns counts + curl reproducer. Counts only, no data exfiltrated.

Renzo Madueno

Supabase RLS Security Scanner — Find anonymous data leaks

renzomacar/supabase-rls-scanner

Probes a public Supabase project for Row-Level-Security misconfigurations. Detects tables readable by the anon key — the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated.

Renzo Madueno

Appwrite Security Scanner — Find public collection leaks

renzomacar/appwrite-security-scanner

Probes a public Appwrite project for collection permission misconfigurations. Detects collections readable by guest role via /v1/databases/*/collections/*/documents. Returns counts + curl reproducer. Counts only, no data exfiltrated.

Renzo Madueno

Firebase Firestore Import

danielwebr/firebase-firestore-import

This actor is designed to simplify the process of transferring data from an Apify dataset into a Firebase Firestore collection. Simply configure the actor with your Firebase credentials, Firestore collection ID, and dataset ID, and it will handle the rest, including optional data transformations.

Daniel Wébr

Firebase Firestore Security Audit - Find if-true Leaks Free

renzomacar/firebase-security-auditor

Static analyzer for firestore.rules + live anonymous probe. Detects 'if true' wide-open rules, expired test-mode, auth-only patterns, open storage. HTML report with paste-ready fix snippets. Free demo mode if you don't have rules handy.

Renzo Madueno

Nhost Security Scanner — Find public Hasura GraphQL leaks

renzomacar/nhost-security-scanner

Probes a public Nhost project's Hasura GraphQL endpoint for tables readable by anon role. Detects the #1 cause of Nhost data leaks: forgotten Hasura permission policies. Returns table-level counts + curl reproducer. Counts only.

Renzo Madueno

Firestore Import

apify/firestore-import

Seamlessly import data from Apify datasets into Firebase Firestore database. This integration allows full control over document IDs, conflict resolution (overwrite, merge, skip), and data transformation using a custom JavaScript function.

Apify

5.0

Supabase Security Audit - Find RLS Leaks Free

renzomacar/supabase-security-auditor

Audit any Supabase project for missing RLS, public tables, dangerous SECURITY DEFINER functions, public storage buckets, and over-permissive policies. Active anon probe confirms live leaks. HTML report with paste-ready fix SQL. Read-only token, never persisted. Free.

Renzo Madueno