Deprecated

Pricing

Pay per usage

See alternative Actors

Go to Apify Store

Supabase Security Audit - Find RLS Leaks Free

Deprecated

See alternative Actors

Audit any Supabase project for missing RLS, public tables, dangerous SECURITY DEFINER functions, public storage buckets, and over-permissive policies. Active anon probe confirms live leaks. HTML report with paste-ready fix SQL. Read-only token, never -- By Renzo Madueno, https://rotatepilot.com

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Renzo Madueno

Actor stats

Bookmarked

Total users

Monthly active users

6 days ago

Last modified

Free Supabase Security Audit - RLS Leak Detector API through CLI

The Apify CLI is the official tool that allows you to use Supabase Security Audit - Find RLS Leaks Free locally, providing convenience functions and automatic retries on errors.

Install Apify CLI

Using installation script (macOS/Linux):

$curl -fsSL https://apify.com/install-cli.sh | bash

Using installation script (Windows):

$irm https://apify.com/install-cli.ps1 | iex

Using Homebrew:

$brew install apify-cli

Using npm:

$npm install -g apify-cli

Other API clients include:

Supabase Security Audit - Find RLS Leaks Free API in Python

Supabase Security Audit - Find RLS Leaks Free API in JavaScript

Supabase Security Audit - Find RLS Leaks Free OpenAPI definition

Supabase Security Audit - Find RLS Leaks Free API

Firebase Firestore Security Audit - Find if-true Leaks Free

renzomacar/firebase-security-auditor

Static analyzer for firestore.rules + live anonymous probe. Detects 'if true' wide-open rules, expired test-mode, auth-only patterns, open storage. HTML report with paste-ready fix snippets. Free demo mode if you don't have rules handy. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

Appwrite Security Audit - Find Public Collections Free

renzomacar/appwrite-security-auditor

Audit any Appwrite project (cloud or self-hosted) for collections with over-permissive document-level permissions, public reads, and anonymous writes. Active anon fetch confirms live leaks. HTML report with paste-ready fix snippets. Free. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

Supabase RLS Security Scanner — Find anonymous data leaks

renzomacar/supabase-rls-scanner

Probes a public Supabase project for Row-Level-Security misconfigurations. Detects tables readable by the anon key — the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

Hasura Security Scanner — anon-role GraphQL leaks

renzomacar/hasura-security-scanner

Probes a public Hasura GraphQL endpoint for tables readable by the anon role. Works for self-hosted, Hasura Cloud, and frameworks on top. Counts only. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

Strapi Security Scanner — Find public collection-type leaks

renzomacar/strapi-security-scanner

Probes a public Strapi instance for misconfigured Public role permissions. Detects content-types readable without auth via /api/{collection}. Returns counts + curl reproducer. Counts only. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

Directus Security Scanner — Find public-role collection leaks

renzomacar/directus-security-scanner

Probes a public Directus instance for misconfigured Public-role permissions. Detects collections readable without auth via /items/{collection}. Returns counts + curl reproducer. Counts only. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

Email & Contact Finder - Emails, Phones, Tech Stack

renzomacar/website-contact-finder

Crawl any website to find email addresses, phone numbers, and social media profiles. Smart crawling prioritizes contact, about, and team pages for fast results. Also detects tech stack. Perfect for B2B lead generation and sales outreach. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

102

Reddit Scraper - Posts, Comments & Sentiment Data

renzomacar/reddit-scraper

Scrape Reddit subreddits, search results, and comment threads. Extract post titles, authors, scores, comment counts, body text, and full comment trees with nested replies. Sort by hot, new, top, or rising. Perfect for market research a -- By Renzo Madueno, https://rotatepilot.com/pilot-pay-2026

Renzo Madueno

303

Indeed Job Listings Scraper - Salaries, Companies, 7 Countries

renzomacar/indeed-jobs

Scrape job listings from Indeed.com across 7 countries. Extract job titles, company names, locations, salary ranges, job types, full descriptions, posting dates, and benefits. Filter by date posted, job type, and location for targeted -- By Renzo Madueno, https://rotatepilot.com/pilot-pay-2026

Renzo Madueno

Nhost Security Scanner — Find public Hasura GraphQL leaks

renzomacar/nhost-security-scanner

Probes a public Nhost project's Hasura GraphQL endpoint for tables readable by anon role. Detects the #1 cause of Nhost data leaks: forgotten Hasura permission policies. Returns table-level counts + curl reproducer. Counts only. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

PocketBase Security Scanner — Find public collection leaks

renzomacar/pocketbase-security-scanner

Probes a public PocketBase instance for misconfigured collection rules. Detects collections readable without auth via /api/collections/*/records. Returns counts + curl reproducer. Counts only, no data exfiltrated. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno