Security Scanning for Supabase Apps

Supabase apps are fast to build but easy to misconfigure. Scorra scans your app for missing Row Level Security policies, exposed service keys, and insecure direct object references.

• Detect missing or disabled Row Level Security (RLS)
• Find exposed Supabase service role keys
• Check auth callback routes for open redirects
• Audit storage bucket access policies