Home/Developer Tools/Supabase RLS Leak Demo
Supabase RLS Leak Demo

Supabase RLS Leak Demo

Reproduce a cross-tenant RLS leak and verify the fix

0upvotes
Launched August 8, 2026

About Supabase RLS Leak Demo

Supabase RLS Leak Demo is a focused, open-source testing tool designed for developers and founders working on multi-tenant applications. It provides a simple yet powerful fixture to simulate a cross-tenant Row-Level Security (RLS) leak in PostgreSQL, allowing users to verify whether their security policies are truly effective. By running a straightforward test suite with commands like 'npm ci && npm test', users can identify potential leaks and confirm their fixes—no need for Docker, cloud credentials, or production data. This makes it an excellent resource for teams committed to security and data integrity in multi-tenant SaaS platforms. The tool's unique value lies in its ability to demonstrate that a policy may appear correct but still harbor vulnerabilities, offering clear evidence before deploying to production.

Screenshots

Supabase RLS Leak Demo screenshot 1

Pros

  • Simple setup with zero dependencies on Docker or cloud credentials
  • Open-source and easy to run locally for immediate security testing
  • Provides clear, reproducible evidence of security leaks and fixes
  • Designed specifically for multi-tenant SaaS applications
  • Helps teams validate security policies before deployment

Cons

  • Limited to PostgreSQL and Supabase environments
  • Primarily focused on RLS leak testing, not a comprehensive security suite
  • Requires familiarity with SQL policies and testing practices

Use Cases

1Testing and verifying multi-tenant data security policies
2Demonstrating RLS vulnerabilities during security audits
3Validating fixes for RLS leaks before production deployment
4Educational tool for developers learning about RLS security
5Security compliance checks for SaaS applications
6Integrating into CI/CD pipelines for ongoing security validation

Pricing

Open source and free to use, with no costs involved. It is designed as a lightweight fixture for local testing and validation.

Quick Info

Upvotes0
Comments1
Launched8/8/2026

Topics

Open SourceDeveloper ToolsGitHub

Makers

Cenk KURTOĞLU

Cenk KURTOĞLU

Alternatives

pgTAP (PostgreSQL testing framework)
PostgreSQL security audit tools
SQL injection testing tools
Custom scripts for RLS testing
Other open-source security testing frameworks for databases
View all Supabase RLS Leak Demo alternatives →

Embed Badge

Add this badge to your website to show that Supabase RLS Leak Demo is featured on Visalytica.

<a href="https://www.visalytica.com/tool/supabase-rls-leak-demo" target="_blank" rel="noopener noreferrer" style="display:inline-flex;align-items:center;gap:6px;padding:6px 14px;background:#7c3aed;color:#fff;border-radius:8px;font-family:-apple-system,system-ui,sans-serif;font-size:13px;font-weight:600;text-decoration:none;transition:background .2s" onmouseover="this.style.background='#6d28d9'" onmouseout="this.style.background='#7c3aed'"><svg width="14" height="14" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round" stroke-linejoin="round"><path d="M12 20V10"/><path d="M18 20V4"/><path d="M6 20v-4"/></svg>Featured on Visalytica</a>