LeakScope — Supabase Security Auditor

What it does

LeakScope scans live websites for Supabase data exposure and misconfigurations. Paste a URL and it checks for: • public Supabase tables • weak or misconfigured RLS policies • exposed API keys in JS • source maps in production • missing security headers The goal is simple: show what an anonymous user could access from the outside.

• 
  SupaleakJan 2026 · ▲14

  Secret scanning for shipped-too-fast websites

• 
  Supaguard Jan 2026 · ▲91

  Scan, Detect & Protect Your Supabase Data

• 
  SecurityScan.devDec 2025

  Find leaked API keys & open Supabase/Firebase in 20 seconds

• 
  API RadarJan 2026 · ▲77

  See your leaked API keys before attackers do

• KD
  KeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30

  I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

• ST
  Supabase-Test – Fast Isolated Postgres DBs for Testing Supabase RLSNov 2025 · npmjs.com · ▲30

  Hi HN — we've built a testing framework for Supabase that spins up fast, isolated Postgres databases for each test case. It’s designed to make RLS policies easy to validate with real database state, without global test fixtures or mock auth. Features: - Instant isolated Postgres DBs per test - Automatic rollback after each test - RLS-native testing with `.setContext()` for auth simulation - Flexible seeding (SQL, CSV, JSON, JS) - Works with Jest, Mocha, and any async test runner - CI-friendly (runs cleanly in GitHub Actions) We also published example projects and a free set of tutorials:…

• 
  Dograh▲592

  The open source VAPI alternative

  Dev tools · 26d ago · dograh.com

• 
  Meridian▲530

  Don't let your work go unnoticed. Get promoted!

  Dev tools · 21d ago · meridiona.com

• 
  x1▲516

  Lovable for iPhone apps go from idea to App Store

  Dev tools · 12d ago · x1.new

• 
  Open-Source eInk Bike Computer▲408

  OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.

  Dev tools · 2d ago · opentrailpaper.com

• 
  The GTM Co-Founder▲402

  Open-source GTM skills for technical founders

  Dev tools · 30d ago · gtmcofounder.com

• 
  Nuphos▲380

  The AI-Native DevOps Workspace.

  Dev tools · 25d ago · nuphos.ai

• 
  Lightfield▲891

  AI-native CRM that builds itself and does work for you

  AI · Mar 2026 · lightfield.app

• 
  Tobira.ai▲730

  A network where AI agents find deals for their humans

  AI · Mar 2026 · tobira.ai

• 
  Claude Import Memory▲725

  Switch from ChatGPT to Claude with import memory feature

  AI · Mar 2026 · claude.com

• 
  Littlebird▲712

  The AI assistant that already knows your work

  AI · Mar 2026 · littlebird.ai

• 
  Viktor.com▲701

  Your AI Coworker that proactively executes tasks

  AI · Mar 2026 · viktor.com

• 
  Jupid▲664

  File your taxes with Claude Code

  Commerce · Mar 2026 · jupid.com