Protect data and access
Supabase RLS Policy Checker
This local Supabase RLS checker reviews pasted SQL for a focused set of risky row-level security patterns before you apply a migration.
Local analyzer: Runs entirely in this browser. SQL stays in your browser.
Run the checkLocal · nothing uploaded
What this checks
- ENABLE and FORCE ROW LEVEL SECURITY statements
- Always-true policies, SECURITY DEFINER, and service-role references
- Obvious user, ownership, workspace, organization, or tenant predicates
What this cannot prove
- It does not connect to Supabase or inspect your schema, grants, roles, views, or deployed policies
- Static pattern matching cannot evaluate full SQL semantics or application authorization
- You still need positive and negative tests with at least two real accounts
Primary references
Use these standards and vendor references when you investigate a result. A link does not imply certification or full coverage of the source.
Need an app-wide assurance record?
LyraShield AI adds authorized target scanning, explicit coverage receipts, evidence states, approval-gated fix proposals, server-owned retests, and immutable reports. This browser tool remains guidance, not a security guarantee.
Get product updatesFrequently asked questions
Does this upload my input?
SQL stays in your browser.
Does a clear result mean my app is secure?
No. Each result is limited to the checks shown here. Use it as a next-step guide, then test the relevant application path.