LeakScope scans live websites for Supabase data exposure and misconfigurations.
Paste a URL and it checks for:
⢠public Supabase tables
⢠weak or misconfigured RLS policies
⢠exposed API keys in JS
⢠source maps in production
⢠missing security headers
The goal is simple: show what an anonymous user could access from the outside.
