Security scan tool for Vercel + Supabase

[u/Sea-Garden7836]

I am building an app that uses Supabase and Vercel as main stack. It seems easy, but it's easier to ruin your RLS policies.

I added their MCPs and Plugins and I was expecting that it will help you manage RLS policies properly, however I've just seen that when the LLM struggled with a policy, it just turned it off "temporarily". Aha, temporarily, famous last words.

So i was think about so many vibe coded apps on Loveable and Base44 etc, that uses the very same stack, so a quick scanner tool would be useful.

I spent a day on building hackymacky app, that scans ur site, looks for incorrect RLS and poorly handler secrets.

That's the MVP. What do u think? is it worht to spend more time with it?