SupaExplorer is a Chrome add-on designed for security engineers, developers, and red-teamers to enhance the security of Supabase applications. It excels in auditing Row Level Security (RLS) policies and detecting exposed API keys from various services, including AWS and Stripe. With its automatic scanning capabilities, users can identify hard-coded credentials, audit permissions, and reproduce potential exploits directly from the browser. The tool's intuitive DevTools panel allows for seamless navigation through project settings and live row-count statuses, making security assessments straightforward.

In addition to its Supabase features, SupaExplorer provides a robust API key leak detection system that scans network responses and JavaScript bundles for exposed credentials. This functionality is crucial for developers and security teams to ensure sensitive information remains protected. The tool emphasizes privacy, with all operations conducted locally within the browser, ensuring data security. SupaExplorer is ideal for anyone involved in securing web applications, from bug bounty hunters to DevOps teams, aiming to prevent unauthorized access and credential leaks.