Free Supabase RLS Checker
Discover tables advertised by your public API and check whether anonymous reads return rows.
Frequently asked
Does this prove RLS is enabled?
No. It checks effective anonymous read access. An empty response can mean an empty table or filtering. Public rows may be intentional; compare the result with your privacy requirements.
Do you store my key or rows?
No. The public key is used for this request only. The result contains table names and read outcomes, never row values.
Related tools
- SSL Checker · Instantly verify a site's SSL certificate · trusted chain, hostname match, issuer and days until it expires.
- Email Security Checker · Check your domain's email authentication · SPF, DKIM, and DMARC · and see if you're vulnerable to spoofing.
- Security Headers Checker · Get an A-F grade on your site's HTTP security headers, including CSP, HSTS, and cross-origin isolation policies.