Is your database locked, or is it soup?
Locksoup is a security audit for Supabase. It checks your Postgres database in about a minute, using a read-only role: row level security, policies, functions, storage. It tells you what it found in plain words and gives you the SQL to fix it.
Open source engine
Locksoup runs on Database Sentinel. Read the code, the checks and the benchmark, or run it yourself as a CLI or an MCP server.
Database Sentinel on GitHub →How it works. Run one SQL snippet to create a login that can only look. Paste its connection string. Get a score, what’s wrong in plain words, and the SQL to fix it.
What it can’t do. It can’t read your rows or change anything. Only schema metadata (table names, policies, function code) goes to the AI model. Fixes are shown, never run.
Why trust it. The engine is open source and measured on a public benchmark: 0.85 F1 on a blind test set, every critical issue caught.
What it checks
- RLS Disabled on Public Tables
- Policies Defined but RLS Not Enabled
- Service Role Key in Frontend Code
- JWT Secret Exposure
- Overly Permissive Policies (USING true)
- Views Bypassing RLS
- SECURITY DEFINER Functions in Exposed Schemas
- Exposed RPC Functions Without Auth
- Mass Assignment via Column Updates
- RLS Policies Referencing user_metadata
- RLS Enabled but No Policies
- Multiple Permissive Policies OR'd Together
- Policies Not Scoped to Correct Roles
- Function Search Path Mutable
- Materialized Views in API
- Public Storage Buckets
- Sensitive Column Names Exposed
Questions
What is Locksoup?
A hosted security audit for Supabase projects. It reads how your Postgres database is set up (tables, row level security policies, functions, grants, storage buckets) and reports what would let someone else read or change your data.
Is my Supabase database exposed?
If a table in the public schema has row level security turned off, anyone holding your anon key can read and write it, and the anon key ships in your frontend. Locksoup finds those tables. Add your project URL and anon key and it confirms which ones an anonymous visitor can really read.
Can Locksoup read or change my data?
No. It connects through a read-only login that you create and reads only how the database is set up. Fixes are shown as SQL for you to review and run yourself.
What is sent to the AI model?
Schema metadata only: table names, policies and function code. Never your rows.
How is it different from the Supabase Security Advisor?
The Security Advisor runs a fixed set of lint rules. Locksoup adds an AI read of your policies and functions for logic mistakes such as mass assignment, confirms what an anonymous visitor can read, scores the result, and can re-check on a schedule and email you when something new appears.
Is it free?
Yes, there is a free plan. Daily checks, the thorough mode, email alerts, full history and report export are part of Pro.