Pricing

Pay per usage

Payload CMS Security Scanner — Find public collection leaks

Probes a public Payload CMS instance for collections readable without auth. Default templates leave read access wide open during development.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Renzo Madueno

Actor stats

Bookmarked

Total users

Monthly active users

19 hours ago

Last modified

Categories

Developer tools

You can access the Payload CMS Security Scanner — Find public collection leaks programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {};
11
12// Run the Actor and wait for it to finish
13const run = await client.actor("renzomacar/payload-security-scanner").call(input);
14
15// Fetch and print Actor results from the run's dataset (if any)
16console.log('Results from dataset');
17console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
18const { items } = await client.dataset(run.defaultDatasetId).listItems();
19items.forEach((item) => {
20    console.dir(item);
21});
22
23// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

Payload CMS Security Scanner — Find public collection leaks API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use Payload CMS Security Scanner — Find public collection leaks API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

Payload CMS Security Scanner — Find public collection leaks API in Python

Payload CMS Security Scanner — Find public collection leaks API through CLI

Payload CMS Security Scanner — Find public collection leaks OpenAPI definition

Payload CMS Security Scanner — Find public collection leaks API

PocketBase Security Scanner — Find public collection leaks

renzomacar/pocketbase-security-scanner

Probes a public PocketBase instance for misconfigured collection rules. Detects collections readable without auth via /api/collections/*/records. Returns counts + curl reproducer. Counts only, no data exfiltrated.

Renzo Madueno

Nhost Security Scanner — Find public Hasura GraphQL leaks

renzomacar/nhost-security-scanner

Probes a public Nhost project's Hasura GraphQL endpoint for tables readable by anon role. Detects the #1 cause of Nhost data leaks: forgotten Hasura permission policies. Returns table-level counts + curl reproducer. Counts only.

Renzo Madueno

Supabase RLS Security Scanner — Find anonymous data leaks

renzomacar/supabase-rls-scanner

Probes a public Supabase project for Row-Level-Security misconfigurations. Detects tables readable by the anon key — the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated.

Renzo Madueno

Website Tech Stack Detector — 100+ Technologies

ryanclinton/website-tech-stack-detector

Identify the technologies, frameworks, and services running on any website. Website Tech Stack Detector crawls one or more URLs, inspects HTTP headers, HTML meta tags, script sources, and body content, then matches them against a fingerprint database of 106 web technologies across 17 categories.

Ryan Clinton

Actor Schema Validator — Verify Output Matches Declared Schema

ryanclinton/actor-schema-validator

Actor Schema Validator. Available on the Apify Store with pay-per-event pricing.

Ryan Clinton

Directus Security Scanner — Find public-role collection leaks

renzomacar/directus-security-scanner

Probes a public Directus instance for misconfigured Public-role permissions. Detects collections readable without auth via /items/{collection}. Returns counts + curl reproducer. Counts only.

Renzo Madueno

Strapi Security Scanner — Find public collection-type leaks

renzomacar/strapi-security-scanner

Probes a public Strapi instance for misconfigured Public role permissions. Detects content-types readable without auth via /api/{collection}. Returns counts + curl reproducer. Counts only.

Renzo Madueno

Appwrite Security Audit - Find Public Collections Free

renzomacar/appwrite-security-auditor

Audit any Appwrite project (cloud or self-hosted) for collections with over-permissive document-level permissions, public reads, and anonymous writes. Active anon fetch confirms live leaks. HTML report with paste-ready fix snippets. Free.

Renzo Madueno

Naukri + Naukrigulf Jobs · India + UAE/Gulf · $0.99💰/1k

memo23/naukri-scraper

💰$0.99/1K Scrape jobs from Naukri.com (India) AND Naukrigulf (UAE/Gulf) in one actor — the only Apify scraper covering both. Search by URL, keyword, location, experience, salary. Rich rows: jobId, company, work mode, education, salary brackets, skills. $1/1k for paying users (BRONZE+). JSON + CSV

Muhamed Didovic

398

4.2

(9)

Domain History Checker

trovevault/domain-history-checker

Research the full history of any domain: how old it is, what content it used to host, whether it was ever used for malware or spam, and whether it has any blacklist flags. Essential for domain buyers, SEO professionals, and more who need to do due diligence before acquiring an expired domain.