# Supabase RLS Security Scanner

> Detect Supabase instances on web pages and scan for Row Level Security (RLS) vulnerabilities.

Canonical page: [https://chrome-stats.com/d/supabase-rls-security-scanner](https://chrome-stats.com/d/supabase-rls-security-scanner)

## Overview

- **ID:** `supabase-rls-security-scanner`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** SecurifyAI
- **Category:** web-development,privacy-security
- **Daily users:** 2
- **Weekly downloads:** 2
- **Version:** 1.0.0
- **Last updated:** 2026-01-21
- **First published:** 2026-01-18
- **Size:** 83 KB
- **Data as of:** 2026-09-05
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/supabase-rls-security-scanner/)
- **Website:** [https://securifyai.co/](https://securifyai.co/)
- **Privacy policy:** [https://addons.mozilla.org/firefox/addon/supabase-rls-security-scanner/privacy/](https://addons.mozilla.org/firefox/addon/supabase-rls-security-scanner/privacy/)

## Description

The Supabase RLS Security Scanner automatically detects Supabase instances on any webpage and tests tables for Row Level Security (RLS) misconfigurations.

Key Features:
🔍 Auto-Detection: Automatically finds Supabase URL and keys in network requests and page content.
🛡️ RLS Scanning: Tests if tables are readable without authentication (Anon role).
⚡ RPC Function Analysis: Discovers and assesses exposed RPC functions for risk.
🎯 Data Exposure Checks: Identifies tables leaking sensitive data.
📊 Real-time Results: View findings directly in the extension popup.

Privacy & Security:
Local Only: All scanning is performed locally in your browser.
No Data Collection: No data is sent to external servers.

This tool is intended for developers and security researchers to audit their own Supabase applications.

## Rankings

- #66,630 — Overall
- #82 — security
- #246 — secure

## Permissions and access

### Permissions

- `activeTab`
- `storage`
- `notifications`

### Host permissions

- `https://*.supabase.co/*`
- `<all_urls>`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [JS Recon & Secret Scanner](https://chrome-stats.com/d/js-recon-secret-scanner) — 5 users
- [Dependency Security Scanner](https://chrome-stats.com/d/dependency-security-scanner) — 1 users
- [SecuriScan – Web Analyzer](https://chrome-stats.com/d/securiscan-web-analyzer) — 2 users
- [JS Recon Buddy](https://chrome-stats.com/d/js-recon-buddy) — 167 users, 5.00 / 5
- [Secret Scanner](https://chrome-stats.com/d/secret_scanner) — 37 users
- [PRISM](https://chrome-stats.com/d/prism-secret-scanner) — 4 users
- [Secret Scanner](https://chrome-stats.com/d/secretscanner) — 35 users
- [Supabase Function Tester](https://chrome-stats.com/d/supabase-function-tester) — 1 users
- [React2shell - RSC Sentinel](https://chrome-stats.com/d/react2shell-rsc-sentinel) — 114 users, 5.00 / 5
- [CredScanner](https://chrome-stats.com/d/credscanner) — 1 users
- [SEOupRank](https://chrome-stats.com/d/seouprank)
- [URL Security Scanner](https://chrome-stats.com/d/url-security-scanner) — 1 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/supabase-rls-security-scanner)