Rowly

Rowly

Supabase RLS Scanner

Deep RLS policy analysis - detect missing policies, permissive anon access, and insecure USING clauses across your Supabase database.

Open source CLI · Credentials never stored · CI-ready

Connection strings are never stored. Scanning is in-memory only.

How do I get my connection string?
  1. 1

    Open your Supabase project

    Go to supabase.com/dashboard and select the project you want to scan.

  2. 2

    Navigate to Database settings

    Click the gear icon (Project Settings) in the sidebar, then open the Database tab.

  3. 3

    Copy the Session pooler connection string

    Click Connect at the top of the dashboard, then under Session pooler copy the URI. The pooler host (pooler.supabase.com) is required - the Direct connection host is IPv6-only and is not reachable from this hosted scanner.

  4. 4

    Replace the password placeholder

    Swap [YOUR-PASSWORD] with your database password. Find or reset it on the same Database page under Database password.

Example format

postgresql://postgres.xxxxx:your-password@aws-0-region.pooler.supabase.com:5432/postgres

Tip: You can change your database password after the scan completes for additional security.