SupaShield

SupaShield is a CLI tool that catches Row Level Security vulnerabilities in Supabase databases before they reach production. It tests RLS policies across all CRUD operations with different user roles, automatically discovers your database schema, and validates permissions using real JWT claims. The tool includes security audits, policy linting, coverage reporting, and change detection via snapshots.

Designed for developers and teams using Supabase, SupaShield integrates directly into CI/CD pipelines with zero configuration required. It runs tests in parallel, outputs JSON for automation, and helps prevent costly production data leaks caused by misconfigured permissions. The maker built it with Lovable.