← Sniff & Fix
Supabase project check
Find the Supabase settings that leave your app's data open, with plain fix steps, SQL to copy and a prompt for your AI helper. Free with a SniffPup account.
Loading your Supabase connection…
SniffPupSign inScan free Start here
Free scanPaste your live URL. Passive, read-only, no signup.Sample reportSee a full report before you scan.How it worksPaste your link, see what's wrong, paste the fix.How the score worksStart at 100, minus points per finding. No letter grades.Sniff & Fix
Sniff & Fix hubPaste-in checks for other common bugs in AI-built apps.Payments DoctorPaste your Stripe checkout and webhook code. Quick check free; full check on Solo and up.Repo scanCheck a public GitHub repo for committed keys, .env files, tables without RLS and Stripe mistakes, plus a licence check and an SBOM of your npm packages.Supabase project checkConnect your Supabase project for a free, read-only check of its security settings. You get a score out of 100, and critical issues come with their fix.Migration safety checkPaste a database migration, or scan a repo, to catch steps that delete or rewrite data before they run. It also flags migrations that run on deploy with no backup first, and the Supabase project check shows whether you have a backup to restore from.Speed DoctorPart of every free scan: a speed score out of 100 and what slows your site down, like heavy JavaScript, large images and missing cache headers. Every finding is free; Solo and up get every fix step.Crash CatcherPart of every free scan: a crash score out of 100 and what can break your site for visitors, like scripts that fail to load and leave a blank page, crash screens, broken styles and dead links to your own pages. Verified sites can also add a small script to see crashes real visitors hit. Every finding is free; Solo and up get every fix step.Cleanup reportPart of the free repo scan: packages and files you likely don't use, copied code, very large files and errors that get hidden, with a cleanup score out of 100 and a step-by-step cleanup plan. Every finding is free; Solo and up get every fix step.Free toolsHeaders, public .env, source maps, Supabase keys and data, Firebase rules, RLS policy explainer.Your reports
Full fix reportEvery fix with prompts for Lovable, Cursor, Bolt and Claude Code, plus 30 days of re-scans.AI rules file (Guardrails)Turns your findings into a rules file for Cursor, Claude Code, Lovable or Bolt, so your AI helper is told not to repeat them. In the full fix report.Re-check one findingFixed something? Re-check just that finding in one click.PDF and Markdown exportDownload any full report.Dashboard and projectsEvery scan, score trends and before/after history.Scheduled re-scansWeekly on Free, daily on Solo, and every hour on Starter, Pro and Ultimate for sites you've verified, with an email only when something new and serious shows up or gets worse.For verified owners
Verify your siteDNS TXT record or a file. Unlocks the Pro deep checks.Deep Supabase and Firebase checkRead-only: which tables, collections and buckets a stranger can read. Counts only.Combined Supabase reportAdvisor + outside scan + deep check + fix prompts in one report.Score badgeScore 80+? Show a badge and public score page. Score and date only.Learn
All checksEvery check SniffPup runs, in one list.GuidesPre-launch checklists for Lovable, Bolt, Cursor, Replit and Supabase.Leaked a key?What to do in the next 10 minutes: OpenAI, Stripe, Supabase, AWS, GitHub.ChangelogEverything we shipped, newest first.Compare scannersWhat we check and what others check. Facts only.Scan my app freeSign in