Sentris
Repo-deep security scanner for AI-built Supabase apps
What it does
Sentris scans your Supabase repo, not just the live URL — the two are not the same thing. Missing RLS policies, service_role keys hardcoded in source, public storage buckets, routes that take an id and never check who is asking, security definer functions anyone can call. Every finding comes with masked evidence — the exact line, row counts, status codes — and a copy-paste fix. I scanned 2,144 public vibe-coded repos while building it: 40.6% had a critical exposure. Free scan, no login.
Sentris is a Supabase security scanner that reads your repo, not just the live URL: missing RLS, leaked service_role keys, public buckets, with proof and a fix.
Sentris reads your repo the way you wrote it (migrations, config, route handlers) plus your live bundle and response headers. Every finding names the exact line and carries the SQL to fix it, and no AI finding reaches you unless it can quote your file character-for-character. No login, no signup: results in seconds. A URL scan only sees your client bundle, so it covers exposed secrets and response security headers. Read-only, nothing is cloned, revoke it whenever you like. Your RLS policies, storage buckets and route handlers live in the repo, and that is the only place they can be checked. By scanning you confirm the app is yours or that you are authorised to test it. See the terms . None…from sentris.dev
Does the same job
all alternatives →
More dev tools this month
the category →
Open-source GTM skills for technical founders
Dev tools · 29d ago · gtmcofounder.com
OpenTrailPaper is open-source bike computer firmware for the LilyGO T5S3 4.7" E-Paper PRO. It supports offline maps, GPX routes, FIT recording and Bluetooth sensors.
Dev tools · 1d ago · opentrailpaper.com
Launched alongside, August 2026
the whole month →- TL
Life & fun · 10d ago · louisabraham.github.io
- SA
Hello HN! I found that picking out plausible but diverse skin tones for my digital art and game development projects was kind of difficult, and I got curious about if there was a way to define a color space that made it easy. I've built a color picker and procedural generation algorithm based on the space as well as a bunch of other fun js features and demos throughout the page that use the equations. If you find it interesting, I have lots of explanations of how I built it and what properties the space has. The methodology might be a bit shaky, but hopefully the result is as helpful for…
Life & fun · Aug 2026 · toneyalexander.github.io
I trained a 125M-parameter transformer to autocomplete piano performances in real time (~108 notes/sec on an iPhone 15). The idea is basically GitHub Copilot or Tabnine, except instead of prompting it with code, you prompt it by playing a few notes on a MIDI piano. The model then continues what you played, entirely on-device. The app is free if anyone wants to try it. Happy to answer questions about the model, training, Core ML, or the many things that didn't work.
AI · 17d ago · simedw.com