Sentris – scans your Supabase repo for missing RLS and leaked keys

Show HN: Sentris – scans your Supabase repo for missing RLS and leaked keys

Sentris – scans your Supabase repo for missing RLS and leaked keys is a company in show hn launch.

Profile

I built this after finding a service_role key in the client bundle of one of my own side projects. It had been live for weeks. That key bypasses RLS completely, so anyone who opened the site could have read every row of every table.Four checks: tables in public without RLS (or with using(true) policies), secrets in repo files and the live bundle, route handlers that take a caller-supplied id with no auth check, and storage buckets marked public. It reads migrations and route handlers in the repo, because a URL scanner can't see any of that.All four rules are written out in full on the page. I also publish precision/recall against my test corpus at /precision: 9 repos, 24 planted findings. Sm

Within the show hn launch space, the company focuses on its core offering rather than a broad product line.

It is recorded at the Show HN launch stage.

Website: www.sentris.dev/index