Supabase RLS scanner

Paste your migration or schema SQL. The checks run in this page: nothing is uploaded, there is no server and no database connection. It looks for tables without row level security, always-true policies, policies built on user_metadata, views that bypass RLS, definer functions without a fixed search_path, and write grants to anon.

A pattern scanner, not a SQL parser or a security proof: it reports what the text shows and cannot tell whether a predicate is correct for your app. Only the public schema is tracked. Not security advice.