supabase-rls-audit

To audit Supabase RLS policies, scan all tables in the public schema to identify missing RLS enforcement, incomplete CRUD policies, and permissive rules like USING (true), then apply generated SQL remediation statements to secure data access.

Missing Row Level Security policies expose sensitive data like user profiles or payment information. An audit detects tables lacking critical SELECT, INSERT, UPDATE, or DELETE permissions and provides specific SQL statements to create secure policies.

Find overly permissive RLS rules by analyzing existing policies for unsafe clauses such as USING (true). The audit flags these rules and suggests actionable SQL fixes to restrict unauthorized data access.

Yes, the RLS audit integrates with Supabase's get_advisors tool to perform a comprehensive security assessment, combining custom policy analysis with native advisor insights for deeper vulnerability detection.

Run a Row Level Security audit immediately after deploying new tables to your Supabase project. This ensures that misconfigured RLS policies do not accidentally expose sensitive data to unauthorized users.

Yes, you can automatically detect which Supabase tables have RLS disabled. The audit performs an RLS status check across the public schema and outputs SQL statements to enable RLS on unprotected tables.