Rowly is a free security scanner that audits Row Level Security policies in your Supabase project.
Rowly reads the actual policy logic across every table, view, function, and role in your project, flags exactly what's exposed, and hands you ready-to-run SQL to fix it, no manual rewriting. Connection strings are never stored, scans run in memory only, and the core scanner is open source (@rowly/core, MIT).
Free to run in seconds:
Open Source scanner:
PopKoren introduces Rowly, a free open source security scanner for auditing Row Level Security policies in Supabase projects. Rowly analyzes policy logic across tables, views, functions, and roles, providing SQL fixes without storing connection strings. The scanner is open source and runs in memory.