Supaguard
Scan, Detect & Protect Your Supabase Data
90 followers
Scan, Detect & Protect Your Supabase Data
90 followers
I’ve seen many Supabase apps accidentally expose PII, PCI, or hardcoded keys. It’s easy to miss and expensive to fix. So I built Supaguard — it scans your app in minutes and shows exactly what’s exposed. • No setup, just connect • Detects PII, PCI & API keys • Instant alerts Launch offer: 2 free scans + 35% New Year discount 👉 supaguard.pro Feedback welcome — built to help devs stay safe without headaches.
Supaguard
Giselle
@vikzsharma I ended up reviewing a lot of code generated by "vibe coders" last year, and it looks like I'll be reviewing even more this year.
It's easy to imagine coding agents adding more security review features—but it's just as easy to imagine those features won't be very effective if the person using them doesn't have solid security fundamentals.
That's why I think having an independent layer like Supaguard to continuously monitor and protect apps will become increasingly important as vibe coding and coding agents keep evolving. Congrats on the launch!
Supaguard
@toyamarinyon Thanks a lot, really appreciate this 🙏
I completely agree — tools can add checks, but without strong fundamentals they often give a false sense of security. Most real issues I see aren’t sophisticated bugs, just missed assumptions and configuration drift over time.
Supaguard is meant to be that independent layer you mentioned — something that keeps watching even as code and tools evolve. Thanks again for the kind words and for sharing your perspective.
@vikzsharma Congrats on the launch and Happy New Year, love what you are building!
quick question: does the detection depends on the local regulation on PII?
thanks!
RLS misconfiguration detection is really valuable - that's often where security issues hide. For teams with multiple Supabase projects, does Supaguard support scanning and monitoring across all projects from a single dashboard?
Supaguard
@yamamoto7 Absolutely — you’re spot on. RLS misconfigurations are one of the most common (and least visible) failure points in Supabase apps.
Right now, Supaguard supports scanning multiple Supabase projects, and we’re actively building a single unified dashboard to monitor all projects in one place.
What’s coming next:
Centralized multi-project view (one dashboard, all Supabase orgs/projects)
Real-time RLS drift detection when policies change or weaken
Instant Slack alerts if a project crosses a risk threshold
The goal is to make RLS issues impossible to miss — even as teams scale and ship fast.
@vikzsharma Brilliant defensive security scanner for Supabase founders. JWT leak detection, RLS policy audits, PCI scanning—all immediately actionable. Your security researcher credibility (recognized by Apple, Microsoft, PayPal) is a differentiator. Magic link onboarding + 2 free scans removes friction. The write-permission probing using non-mutating OPTIONS is elegant. Essential for teams shipping fast who can't risk post-launch security incidents.
Supaguard
@kjosephabraham Thanks a lot — really appreciate this thoughtful breakdown 🙏
Supaguard is built exactly for teams shipping fast who don’t get a second chance with user data.
We’re doubling down on proactive defense next :
• Real-time exposure alerts the moment a policy, JWT, or table becomes risky
• Slack alerts so security findings land where teams already work (no dashboards to babysit)
• Ongoing drift detection for RLS & permissions — not just point-in-time scans
Goal is simple: catch security regressions before attackers or users do.
If you’ve got feature ideas from the founder/security side, I’m all ears.
@vikzsharma - I have tested the product and it's super impressive! They way it dice and slice the data in a very user friendly format is very good.
Thinking to utilise the same in proactive threat defence and hunting!
Looking forward to more collaboration and new features!
After using Supabase for the first time (ease of setup, and getting rolling with a production website), while at the same time spending the last 15 years in fortune 50 companies - I know the importance of protecting data! Love how you are making this simpler in a database setup that is so simple to use.
Supaguard
@analyticspitfalls Thank you — that really means a lot, especially coming from someone with that background 🙏
Supabase makes it incredibly easy to get into production, which is powerful, but it also means data protection has to be just as accessible.
The goal with Supaguard is exactly that: making security feel like a natural part of the workflow, not an extra burden. Really appreciate you sharing this.