Source

UpGuard Research

1 item

The research team of a security vendor that scans the public internet for exposed data and publishes the method and case studies. Primary for its own scans; the vendor also sells monitoring, so read the conclusions as its view and the counts as its measurement.

upguard.com ↗

Tools

UpGuard found 16,326 Supabase databases whose tables anyone could read

Security firm UpGuard published a scan of about 300,000 websites that use Supabase on September 25, 2026. It found 16,326 databases that returned readable tables to an outside request, and over half showed signs of personal data. UpGuard ties the problem to apps built by AI coding agents, because tables created through the API do not get Row Level Security by default.

UpGuard ResearchSeptember 25verified