Observed arrival · 2026-10-17
ShipSecurely’s Supabase exposure checker
A security reference for apps built with coding assistants, with issue guides, fixes, tools, and a browser-based Supabase exposure check.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- Developers shipping AI-built Supabase apps
- Worth noticing
- The checker runs in the browser; its stated coverage excludes the October 30 grant change and is not a full audit.
Field notes
The reference groups issues by platform and problem, with entries for Supabase, Vercel, Next.js, Stripe, and several coding assistants. Its guides are described as including a five-minute check, a fix, and a prompt for the agent that wrote the app. The Supabase checker asks for table names alongside the project URL and public anon key; the page says the key goes to Supabase and is not received or stored by ShipSecurely.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
†AdsAdvertising visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
ƒJavaScriptBrowser-side code central
One card from the complete issue