Skip to content
What are you looking for?. Open searchSR

Source

Supabase Blog

1 item

Supabase's own blog and documentation. Primary for what the product does and which settings are on by default; not evidence for how customers actually configure it.

supabase.com ↗

Toolsstrong signal

UpGuard found 16,326 Supabase databases whose tables anyone could read

Security firm UpGuard published a scan of about 300,000 websites that use Supabase on September 25, 2026. It found 16,326 databases that returned readable tables to an outside request, and over half showed signs of personal data. UpGuard ties the problem to apps built by AI coding agents, because tables created through the API do not get Row Level Security by default.

UpGuard Researchverified