Pricing

Pay per usage

Supabase RLS Security Scanner — Find anonymous data leaks

Probes a public Supabase project for Row-Level-Security misconfigurations. Detects tables readable by the anon key — the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Renzo Madueno

Actor stats

Bookmarked

Total users

Monthly active users

4 hours ago

Last modified

Categories

Developer tools

You can access the Supabase RLS Security Scanner — Find anonymous data leaks programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = {
9    "supabaseUrl": "https://YOUR-PROJECT.supabase.co",
10    "anonKey": "",
11}
12
13# Run the Actor and wait for it to finish
14run = client.actor("renzomacar/supabase-rls-scanner").call(run_input=run_input)
15
16# Fetch and print Actor results from the run's dataset (if there are any)
17print("💾 Check your data here: https://console.apify.com/storage/datasets/" + run["defaultDatasetId"])
18for item in client.dataset(run["defaultDatasetId"]).iterate_items():
19    print(item)
20
21# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

Supabase RLS Security Scanner - Find Anonymous Data Leaks API in Python

The Apify API client for Python is the official library that allows you to use Supabase RLS Security Scanner — Find anonymous data leaks API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

Supabase RLS Security Scanner — Find anonymous data leaks API in JavaScript

Supabase RLS Security Scanner — Find anonymous data leaks API through CLI

Supabase RLS Security Scanner — Find anonymous data leaks OpenAPI definition

Supabase RLS Security Scanner — Find anonymous data leaks API

Supabase Security Audit - Find RLS Leaks Free

renzomacar/supabase-security-auditor

Audit any Supabase project for missing RLS, public tables, dangerous SECURITY DEFINER functions, public storage buckets, and over-permissive policies. Active anon probe confirms live leaks. HTML report with paste-ready fix SQL. Read-only token, never persisted. Free.

Renzo Madueno

Firebase Firestore Security Audit - Find if-true Leaks Free

renzomacar/firebase-security-auditor

Static analyzer for firestore.rules + live anonymous probe. Detects 'if true' wide-open rules, expired test-mode, auth-only patterns, open storage. HTML report with paste-ready fix snippets. Free demo mode if you don't have rules handy.

Renzo Madueno

Appwrite Security Audit - Find Public Collections Free

renzomacar/appwrite-security-auditor

Audit any Appwrite project (cloud or self-hosted) for collections with over-permissive document-level permissions, public reads, and anonymous writes. Active anon fetch confirms live leaks. HTML report with paste-ready fix snippets. Free.

Renzo Madueno

PocketBase Security Audit - Find Open API Rules Free

renzomacar/pocketbase-security-auditor

Audit any PocketBase instance for collections with empty (public) list/view/create/update/delete rules and over-permissive endpoints. Active anon fetch confirms live leaks. HTML report with paste-ready collection rule snippets. Free.

Renzo Madueno

Hasura Security Audit - Find Open Anonymous Roles (Nhost) Free

renzomacar/nhost-security-auditor

Audit any Hasura instance (self-hosted or Nhost) for tables with anonymous-role permissions, missing column filters, and unprotected mutations. Live GraphQL probe confirms what's exposed. HTML report with paste-ready permission snippets. Free.

Renzo Madueno

Email Data Breach Checker

lofomachines/email-breach-checker

Check if your email has been compromised in a data breach. Scan one or hundreds of emails in bulk to find leaked passwords, exposed accounts, and stolen credentials. Get a full risk score, breach history, and affected sites — fast, accurate, and affordable.

Lofomachines

Cookie Scanner

automation-lab/cookie-scanner

This actor scans cookies set by websites via HTTP response headers. It identifies first-party vs third-party cookies, checks for Secure and HttpOnly flags, validates SameSite attributes, and categorizes cookies (analytics, advertising, functional, consent). Essential for GDPR and privacy...

Stas Persiianenko

Naukri & Naukrigulf [$0.99💰] Jobs Search By Urls and Filters

memo23/naukri-scraper

💰 $0.99 per 1,000 jobs – No limits, no quotas, unlimited extraction. Scrape Naukri & Naukrigulf job listings with full details: jobIds, company data, work mode, education, salary brackets, experience ranges, locations, skills, and apply links—ready for analytics pipelines.

Muhamed Didovic

365

4.2

(9)

All-in-One Instagram Scraper

get-leads/all-in-one-instagram-scraper

Instagram scraper — 11 modes: profiles, posts, reels, comments, hashtags, tagged, search, followers count & more. No browser needed — HTTP-only, 256MB, fast. Premium residential proxy (~95% success rate). Pay per result: 40% cheaper. MCP-ready for AI agents.

Japi Cricket

Website Tech Stack Detector — 100+ Technologies

ryanclinton/website-tech-stack-detector

Identify the technologies, frameworks, and services running on any website. Website Tech Stack Detector crawls one or more URLs, inspects HTTP headers, HTML meta tags, script sources, and body content, then matches them against a fingerprint database of 106 web technologies across 17 categories.