Security Overview

Real-time insights into your Supabase instance security posture.

🛡️

Critical Risks

0

⚠️

High Risks

0

⚡

Medium Risks

0

✅

Safe Resources

0

✨

AI Security Insights

Run a scan with AI enabled to generate a security analysis.

Vulnerability Distribution

System Status

Last Scan: Never

Target: Not Configured

Scan Duration: 0s

Total Checks: 0

Active Engine: SSF Core v1.2.13

AI Provider: None

📟 Live Activity Log

[System] SSF v1.2.13 Web UI initialized.

[System] Ready to scan.

Configure New Scan

Launch a comprehensive security audit against your target.

It may take a while, please wait.

Target URL

Service Role Key

AI Provider

Model

AI API Key (Optional)

Scan Depth (1-3)

1

Plugins (Optional) Enter specific plugin names (e.g., cors_exploit) or 'all' to run all plugins. Leave empty for none.

Scan Modules

🛡️

RLS Policies

Checks for Row Level Security.

🔑

Authentication

Verifies public registration.

📦

Storage

Scans public buckets.

⚡

RPC / Functions

Finds insecure functions.

📡

Realtime

Checks exposed channels.

🐘

Postgres

Analyzes DB config.

Detailed Findings

Latest Scan Results

📊

No report loaded. Run a scan to see results.

Scan History

Downloads

Risk Management

Review and manage accepted risks.

Exploit Gallery

Automated Proof-of-Concept generation and execution.

💣

No exploits available. Run a scan with AI enabled.

Visual Threat Model

Interactive graph of Actors, Attacks, and Assets.

Loading graph...