SupaExplorer — Find Leaked API Keys in 30 Seconds

What You Actually Get

Stop guessing if your app is secure. Get concrete answers.

Save Hours of Manual Auditing Time

Instant leak detection while browsing. No manual code review needed. Scan any site in 30 seconds flat.

Prevent Costly Breaches Money

Catch exposed credentials before attackers do. One leaked service key can cost thousands. Find it first.

Know Exactly What's Exposed Certainty

See exposed tables + data preview. No more wondering if your RLS policies work. Get proof.

Zero Setup Required Simplicity

Paste a URL or install the extension. That's it. No config files, no CLI tools, no learning curve.

Scale Across All Your Apps Growth

Monitor multiple domains, discover subdomains, track historical reports. One dashboard for everything.

Sleep Better at Night Peace

Know your database is locked down. Track security posture over time. Share reports with your team.

100% Free

Three Free Tools. Immediate Value.

Start securing your app right now. No credit card, no signup for basic scans.

Chrome Extension

Browse any website and instantly detect leaked Supabase keys, exposed tables, and vulnerable endpoints — all in real-time.

Outcome: See what files leak your keys while you browse

Install Extension

Supabase Leak Scanner

Paste any URL and get a full security report in 30 seconds. Find exposed Supabase URLs, anon keys, and service role keys.

Outcome: Full leak report with exact file locations

Scan a URL Now

Supabase OAuth Audit

Connect your Supabase project directly. See exactly which tables lack RLS, which are publicly readable, and what data is exposed.

Outcome: Complete table inventory + RLS status

Start OAuth Audit

See Your Database Through An Attacker's Eyes

This is what someone with your leaked keys can access right now.

Files Leaking Keys

/static/js/main.chunk.js

/bundle.js

/_next/static/chunks/app.js

/assets/index-Ab3Cd.js

Exposed Tables

users (1,247 rows)

orders (8,932 rows)

payments (3,421 rows)

admin_logs (protected)

Sample Leaked Data

email: [email protected]

phone: +1-555-0123

address: 123 Main St...

card_last4: 4242

Check If Your App Is Exposed

Cloud Platform

When You're Ready to Go Pro

Free tools find problems. Pro tools fix them and prevent new ones.

AI-powered fix recommendations — Get actual SQL snippets to fix your RLS policies

Historical tracking — See how your security posture changes over time

Subdomain discovery — Find all your exposed endpoints automatically

Team collaboration — Share findings, assign issues, track remediation

Professional shareable reports — PDF exports for clients, auditors, and stakeholders

AI Analysis: Complete

Tables scanned: 24

RLS enabled: 18/24

Critical issues: 3

Warnings: 7

Fix snippets: Generated ✓

Simple, transparent pricing

One plan with every feature turned on.

Free tools for detection. Cloud subscription for fixes, history, and team features.

All Cloud features included

10 teams you can create & own Memberships in other teams are unlimited
20 invited members per team
50 domains per team
200 reports per domain
Unlimited Supabase Audits + AI Reports
Public share links + PDF exports
Subdomain + DNS discovery

Try it out

Monthly

$9/mo

Billed monthly, cancel anytime.

Start monthly

Save 17%

Annual

$90/yr

Save 2 months compared to monthly.

Save with annual

Access forever

Lifetime

$249

Pay once. Access forever.

Lifetime access

Find Leaked Keys in 30 Seconds.
See What Attackers See.