Pricing

from $4.65 / 1,000 security findings

Try for free

Go to Apify Store

🗃️ PocketBase Security Scanner - Find Leaks

Try for free

Probes a public PocketBase instance for misconfigured collection rules. Detects collections readable without auth via /api/collections/*/records. Returns counts + curl reproducer. Counts only, no data exfiltrated.

Pricing

from $4.65 / 1,000 security findings

Rating

0.0

(0)

Developer

Renzo Madueno

Actor stats

Bookmarked

Total users

Monthly active users

7 days ago

Last modified

Categories

Developer tools

Apify Store pricing discounts use a tiered approach. Higher subscription plans unlock lower Actor costs. See our subscription plans.

Pricing	Free No discount	Starter Bronze discount	Scale Silver discount	Business Gold discount

Security finding	$5.00 / 1,000	$4.75 / 1,000	$4.70 / 1,000	$4.65 / 1,000
Actor Start Infrequent	$0.02	$0.019	$0.0188	$0.0186
Additional costs
Platform usage	Free	Free	Free	Free

This Actor's pricing details are outlined in the table below. The unit prices you pay depend on your subscription plan, with higher tiers offering better rates. Visit our pricing page to compare plans and see how much you can save.

Pricing	Free No discount	Business Gold discount

Security finding Charged per security finding pushed to the dataset.	$5.00 / 1,000	$4.65 / 1,000
Actor StartInfrequent Charged when the Actor starts running. Number of events charged depends on Actor memory (one event per GB, minimum one event).	$0.02	$0.0186
Additional costs
Platform usageIncluded Platform usage costs are tied to the Actor's performance in terms of the underlying platform resources it consumes. Learn more	Free

🧭 Directus Security Scanner - Find Leaks

renzomacar/directus-security-scanner

Probes a public Directus instance for misconfigured Public-role permissions. Detects collections readable without auth via /items/{collection}. Returns counts + curl reproducer. Counts only.

Renzo Madueno

🚀 Strapi Security Scanner - Find Public Leaks

renzomacar/strapi-security-scanner

Probes a public Strapi instance for misconfigured Public role permissions. Detects content-types readable without auth via /api/{collection}. Returns counts + curl reproducer. Counts only.

Renzo Madueno

Supabase RLS Security Scanner - Find Anonymous Data Leaks

renzomacar/supabase-rls-scanner

Supabase RLS security scanner. Probes a public Supabase project for Row-Level-Security misconfigurations and detects tables readable by the anon key - the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated. By Renzo Madueno.

Renzo Madueno

📦 Payload CMS Security Scanner - Find Leaks

renzomacar/payload-security-scanner

Probes a public Payload CMS instance for collections readable without auth. Default templates leave read access wide open during development.

Renzo Madueno

🪺 Nhost Security Scanner - Find Public Leaks

renzomacar/nhost-security-scanner

Probes a public Nhost project's Hasura GraphQL endpoint for tables readable by anon role. Detects the #1 cause of Nhost data leaks: forgotten Hasura permission policies. Returns table-level counts + curl reproducer. Counts only.

Renzo Madueno

⚡ Convex Security Scanner - Find Public Leaks

renzomacar/convex-security-scanner

Probes a public Convex deployment for queries that return data without auth. Convex queries are public-by-default unless you check auth inside the handler. Returns counts + reproducer.

Renzo Madueno

🌐 WordPress Security Scanner - REST API User & Draft Leaks

renzomacar/wordpress-security-scanner

WordPress security scanner. Probes the WordPress REST API for endpoints leaking users, plugins, drafts and customer data - the misconfigurations attackers enumerate before a brute-force. 40% of the web runs WordPress. Counts only, no data exfiltrated. Fix guidance included. By Renzo Madueno.

Renzo Madueno

Shopify Scraper - Products, Collections, Analysis

prodiger/shopify-scraper

Scrape products and collections from any Shopify-powered store. Pay-per-event pricing — only pay for the items you actually scrape. No API key needed.

Arnas

🔗 Hasura Security Scanner - Find Anon Leaks

renzomacar/hasura-security-scanner

Probes a public Hasura GraphQL endpoint for tables readable by the anon role. Works for self-hosted, Hasura Cloud, and frameworks on top. Counts only.

Renzo Madueno

Hugging Face Collections Scraper

parseforge/huggingface-collections-scraper

Scrapes Hugging Face Collections by search term, owner, or sort order. Returns each collection as a flat row with title, description, upvotes, and model references.