Question 1

How do I check my Supabase RLS policies for security holes?

Accepted Answer

AuditYourApp performs an automated deep-scan of your Postgres schema. It simulates attacker behavior to identify tables with missing Row Level Security (RLS) policies, permissive "true" policies, and unauthenticated public access risks.

Question 2

Is AuditYourApp safe to run on a production database?

Accepted Answer

Yes. The scanner operates in a read-only context for 95% of checks. For write-access verification, it uses transaction rollbacks to ensure no dummy data is left behind.

Question 3

Does it provide code to fix the security issues?

Accepted Answer

Yes. Unlike standard scanners that only report errors, AuditYourApp generates the exact SQL snippets and Policy definitions needed to patch vulnerabilities and secure your Supabase project.

Question 4

What is the difference between the Single Snapshot and Continuous Guard?

Accepted Answer

The Single Snapshot ($49) is a one-time audit perfect for pre-launch verification. Continuous Guard ($29/mo) runs weekly scans to detect security regressions, ensuring new code pushes do not accidentally expose private data.

Question 5

Does it offer manual expert review??

Accepted Answer

Yes, AuditYourApp offers an Expert Architecture Review ($499) which includes manual logic analysis by a human security engineer.

Security Checklists

Supabase Security Checklist

Firebase Security Checklist

Supabase RLS Audit Checklist

Mobile App Security Checklist

API Key Management Checklist

Supabase Storage Security Checklist

Firestore Security Rules Checklist

Pre-Launch Security Checklist

Supabase Edge Function Security Checklist

BaaS Compliance Checklist

Supabase Production Readiness Checklist

Frontend Secret Leak Prevention Checklist