What is SupaExplorer used for?

SupaExplorer is a security scanner for Supabase apps that finds exposed keys in a site's code, shows which tables are readable and suggests fixes for access rules. It is a good fit for checking an app before launch for leaked keys, auditing which Supabase tables are publicly readable and sharing security findings with clients or a team.

Is SupaExplorer free?

Yes. SupaExplorer has a free plan, and paid plans start at $9 per month.

Is SupaExplorer open source?

No. SupaExplorer is proprietary (closed-source) software and can't be self-hosted. In the Security category, open-source options include CISO Assistant, Gitleaks and TruffleHog.

What are some alternatives to SupaExplorer?

SupaExplorer competes with CheckVibe, Aikido Security and Snyk.

SupaExplorer: features, pricing and alternatives

About SupaExplorer

SupaExplorer checks whether a Supabase-based app leaks credentials. Pasting a URL runs a scan that looks for leaked Supabase project URLs, anonymous keys and service-role keys in the site's JavaScript files and reports the exact files involved, and a Chrome extension flags exposed keys, vulnerable tables and insecure endpoints while browsing. The site says it scans for more than a dozen API services and needs no signup for the free tools.

A Supabase project audit connects directly to a project and lists which tables lack row-level security, which can be read publicly and which records are visible, giving an inventory with RLS status. The Pro tier adds AI-written fix recommendations with SQL snippets for RLS policies, audit snapshots to compare over time, subdomain discovery, team collaboration and shareable PDF reports. It is aimed at developers who ship apps quickly and want to verify their database is locked down.

Key features

URL scanner for exposed Supabase keys
Chrome extension that detects leaks while browsing
Project audit showing tables without RLS
Report of the files that expose keys
AI-written SQL fixes for RLS policies on Pro
Audit snapshots and PDF reports on Pro

Good fit for

Checking an app before launch for leaked keys
Auditing which Supabase tables are publicly readable
Sharing security findings with clients or a team

Tags: supabase; security; key-scanner; rls; chrome-extension; audit; developer-tools; vulnerability

SupaExplorer: questions and answers

What is SupaExplorer used for?: SupaExplorer is a security scanner for Supabase apps that finds exposed keys in a site's code, shows which tables are readable and suggests fixes for access rules. It is a good fit for checking an app before launch for leaked keys, auditing which Supabase tables are publicly readable and sharing security findings with clients or a team.
Is SupaExplorer free?: Yes. SupaExplorer has a free plan, and paid plans start at $9 per month.
Is SupaExplorer open source?: No. SupaExplorer is proprietary (closed-source) software and can't be self-hosted. In the Security category, open-source options include CISO Assistant, Gitleaks and TruffleHog.
What are some alternatives to SupaExplorer?: SupaExplorer competes with CheckVibe, Aikido Security and Snyk.