Knock scans your code, Supabase, and infrastructure in 60 seconds to find leaked secrets, broken RLS, and exposed ports. No setup. Exact fixes. Most devs find critical issues on day one. If we don’t find anything, you get your money back.

👋 Hey Product Hunt! I built Knock to solve a problem I kept running into: Codebases, databases, and infra often have serious security issues — and most devs don’t realize it until it’s too late. Knock does three things well: Scans GitHub for hardcoded secrets (AWS keys, DB creds, etc.) Audits Supabase for missing RLS, public tables, and policy gaps Checks your public-facing IPs for exposed ports like RDP, SSH, or admin panels 🛠 You get actionable results: Exact SQL commands to fix RLS issues Real-time alerts when your infra changes Smart suggestions based on actual misconfigurations Most scans take <60 seconds and find critical issues right away. 🔍 If we don’t find anything in 30 days, you get a full refund. Would love your feedback — especially if you're using Supabase in prod or shipping fast and want a second set of (automated) eyes on your stack. Thanks for checking it out! — Sam

Knock sounds like a must-have for modern dev teams. Fast audits with real fixes and a money-back guarantee? That’s confidence—and exactly what security tooling needs more of.

Knock — Build Fast, Stay Secure

Audit your code, Supabase, and infra instantly.

Audit your code, Supabase, and infra instantly.