For Supabase
Hack your Supabase app before someone else does.
Apps running on Supabase ship fast. These are the problems we check for first.
Common risks
- Row-level security disabled
- Service-role key in the browser
- Schema exposed to anonymous users
Checks that matter most
- ERT-BAAS-001Supabase table readable by anonymous usersCritical
- ERT-SECRETS-002Supabase service_role key in clientCritical
- ERT-BAAS-012PostgREST schema exposed to anonymous usersLow
Emerald Red Team isn't affiliated with or endorsed by Supabase.