Blog

Security guides and insights for modern SaaS

The 9 Best Automated Penetration Testing Tools in 2026 (Honest Comparison)
Comparisons·8 min read

The 9 Best Automated Penetration Testing Tools in 2026 (Honest Comparison)

An honest comparison of automated pentesting platforms — ModernPentest, Aikido Attack, Ethiack, Intruder, Detectify, Astra, Beagle Security, Pentera, and OWASP ZAP — with pricing, strengths, and who each one is actually for.

Read article
ModernPentest Is Verified Under Anthropic's Cyber Verification Program
Company·4 min read

ModernPentest Is Verified Under Anthropic's Cyber Verification Program

We've been verified under Anthropic's Cyber Verification Program — clearance that lets our AI agents perform real, end-to-end offensive testing without being throttled by default safety refusals. Here's what that means for your security.

Read more
How to Secure a Supabase App Before Launch: Tools That Actually Test It (2026)
Security Guides·6 min read

How to Secure a Supabase App Before Launch: Tools That Actually Test It (2026)

A practical guide to Supabase security tooling — from Supabase's built-in Security Advisor to supabomb and full AI pentesting — based on our research scanning 107 YC startups, 61% of which were exposing data.

Read more
20 Million Rows Exposed: A Supabase Security Study of YC Startups
Research·11 min read

20 Million Rows Exposed: A Supabase Security Study of YC Startups

We scanned 107 Y Combinator startups using Supabase and found alarming security gaps. 28% were exposing PII through misconfigured databases. Here's what we discovered and how to protect your data.

Read more
Introducing Firebomb: Open Source Firebase Penetration Testing
Tools·9 min read

Introducing Firebomb: Open Source Firebase Penetration Testing

Meet Firebomb, our open source CLI for automated security testing of Firebase applications. Test Firestore rules, RTDB permissions, Storage ACLs, and Cloud Functions authentication.

Read more
Securing Firebase in Production: Complete Security Checklist
Security Guides·20 min read

Securing Firebase in Production: Complete Security Checklist

A comprehensive guide to securing your Firebase application. Learn how to lock down Firestore rules, RTDB permissions, Cloud Storage, Cloud Functions, App Check, Data Connect, and Genkit.

Read more
Introducing Validation Agents: AI-Verified Findings and Remediation Confirmation
Product·5 min read

Introducing Validation Agents: AI-Verified Findings and Remediation Confirmation

Meet our new Finding Triage Agent and Remediation Verification Agent. Zero false positives. Verified fixes. Security you can trust.

Read more
10 Common Supabase Security Misconfigurations (and How to Fix Them)
Security Guides·9 min read

10 Common Supabase Security Misconfigurations (and How to Fix Them)

Learn how to identify and fix the most dangerous Supabase security misconfigurations that could expose your user data. Includes code examples and remediation steps.

Read more
Introducing Supabomb: Open Source Supabase Penetration Testing
Tools·13 min read

Introducing Supabomb: Open Source Supabase Penetration Testing

Meet Supabomb, our open source CLI for automated security testing of Supabase applications. Discover RLS bypasses, test storage permissions, and find vulnerabilities before attackers do.

Read more