Blog

Security guides and insights for modern SaaS

Showing 6 posts tagged "security"Clear
20 Million Rows Exposed: A Supabase Security Study of YC Startups
Research·11 min read

20 Million Rows Exposed: A Supabase Security Study of YC Startups

We scanned 107 Y Combinator startups using Supabase and found alarming security gaps. 28% were exposing PII through misconfigured databases. Here's what we discovered and how to protect your data.

Read article
Introducing Firebomb: Open Source Firebase Penetration Testing
Tools·9 min read

Introducing Firebomb: Open Source Firebase Penetration Testing

Meet Firebomb, our open source CLI for automated security testing of Firebase applications. Test Firestore rules, RTDB permissions, Storage ACLs, and Cloud Functions authentication.

Read more
Securing Firebase in Production: Complete Security Checklist
Security Guides·20 min read

Securing Firebase in Production: Complete Security Checklist

A comprehensive guide to securing your Firebase application. Learn how to lock down Firestore rules, RTDB permissions, Cloud Storage, Cloud Functions, App Check, Data Connect, and Genkit.

Read more
Introducing Validation Agents: AI-Verified Findings and Remediation Confirmation
Product·5 min read

Introducing Validation Agents: AI-Verified Findings and Remediation Confirmation

Meet our new Finding Triage Agent and Remediation Verification Agent. Zero false positives. Verified fixes. Security you can trust.

Read more
10 Common Supabase Security Misconfigurations (and How to Fix Them)
Security Guides·9 min read

10 Common Supabase Security Misconfigurations (and How to Fix Them)

Learn how to identify and fix the most dangerous Supabase security misconfigurations that could expose your user data. Includes code examples and remediation steps.

Read more
Introducing Supabomb: Open Source Supabase Penetration Testing
Tools·13 min read

Introducing Supabomb: Open Source Supabase Penetration Testing

Meet Supabomb, our open source CLI for automated security testing of Supabase applications. Discover RLS bypasses, test storage permissions, and find vulnerabilities before attackers do.

Read more