On Launch Llama
Sentris - Security Scanner for Supabase Applications
For developers: Sentris scans your Supabase app for security exposures like leaked keys and unguarded routes so you fix vulnerabilities before attackers find them.
Built by Luca Urti
Developer Tools SaaS Freemium
Visit website → Upvotes · 52
In category: #666 of 1291 · Developer ToolsTrending this week: #1283 of 1291 · Developer Tools
Sentris is a Community listing on Launch Llama with 52 total upvotes across 15 founder supporters, founded by Luca Urti who joined in Aug 2026, compared against 6 alternatives.
Community listing
Listing status
52upvotes
Community score
Luca Urti (Joined Aug 2026)
Founder
Compared against 6 alternatives
Market comparison
About
Sentris scans your Supabase repository and live application to detect critical security exposures including leaked service_role keys, tables without row-level security, public storage buckets, and unguarded routes. It provides exact file locations, masked evidence, and copy-paste fixes for each finding. Free scanning available with paid tiers for full four-check analysis and enterprise pentests.
Ask AI
ChatGPT Claude Perplexity Grok
For agents
llms.txt · llms-full.txt · ai.txt · Live fact sheet · Full catalog (.md) · Endpoint index · API spec · REST access · Agent server · Server manifest · Server discovery
Key Features
- Scan Supabase repositories for leaked API keys and exposed credentials
- Detect tables missing row-level security configurations
- Identify publicly accessible storage buckets
- Flag unprotected application routes and endpoints
Use Cases
- Run Sentris's free security scan on your Supabase repository to identify leaked service_role keys and misconfigured tables before deploying to production
- Use Sentris to detect tables missing row-level security policies and get exact file locations and copy-paste fixes to implement them immediately
- Scan your live Supabase application with Sentris's paid tier to check all four security categories including unguarded routes and public storage buckets
- Leverage Sentris's masked evidence reports to audit security exposures across your team without exposing sensitive credentials in findings
- Schedule Sentris enterprise pentests to conduct comprehensive security assessments of your Supabase infrastructure as part of your release process
Pricing
Sentris offers a free plan plus paid tiers. See the website for current pricing.
FAQ
What is Sentris?
Sentris scans your Supabase repository and live application to detect critical security exposures including leaked service_role keys, tables without row-level security, public storage buckets, and unguarded routes. It provides exact file locations, masked evidence, and copy-paste fixes for each finding. Free scanning available with paid tiers for full four-check analysis and enterprise pentests.
What are the key features of Sentris?
Sentris includes: • Scan Supabase repositories for leaked API keys and exposed credentials • Detect tables missing row-level security configurations • Identify publicly accessible storage buckets • Flag unprotected application routes and endpoints • Receive exact file locations and line numbers for each vulnerability • Access templated fixes and remediation code snippets
What can I use Sentris for?
• Run Sentris's free security scan on your Supabase repository to identify leaked service_role keys and misconfigured tables before deploying to production. • Use Sentris to detect tables missing row-level security policies and get exact file locations and copy-paste fixes to implement them immediately. • Scan your live Supabase application with Sentris's paid tier to check all four security categories including unguarded routes and public storage buckets. • Leverage Sentris's masked evidence reports to audit security exposures across your team without exposing sensitive credentials in findings. • Schedule Sentris enterprise pentests to conduct comprehensive security assessments of your Supabase infrastructure as part of your release process.
How much does Sentris cost?
Sentris offers a free plan plus paid tiers. See the website for current pricing. You can discover and review Sentris for free on Launch Llama.
What category does Sentris belong to?
Sentris is listed under Developer Tools, SaaS on Launch Llama.
How do I get started with Sentris?
Click the "Visit Website" button on this page to go directly to Sentris. You can also upvote and leave a review to help other founders discover it.
Supporters
15 founders15 founders contributed 52 upvotes to Sentris on Launch Llama.
Reviews
2 comments
I've been building in public on X for a few weeks, and Sentris actually started as a totally different idea (lead-magnet micro-tools for SaaS founders). But the more I worked with AI-generated code, the clearer it got: the real gap is security. Vibe-coding makes it super easy to ship fast — but just as easy to miss an open Supabase table or a secret sitting in the client bundle. So I rebuilt Sentris from scratch: an automated scanner that takes a GitHub repo and/or a live URL, detects the typical exposures (missing RLS, leaked keys, IDOR, public storage buckets), and shows you the fix directly.
Hey, love seeing this here! 👋 What inspired you to build this? Would love to hear the story behind it.
Alternatives
- Sentilio
For site owners: Sentilio runs 200+ security checks across SSL, DNS, and email so you fix vulnerabilities before they become breaches.
- SendNow
For finance teams: SendNow shares documents securely with page-level analytics so you track engagement and close deals faster.
- VibeScan
For developers: VibeScan detects security flaws in AI-built apps—exposed keys, CORS issues, missing rate limits—in seconds, no signup needed.
- Decloak.dev
For developers: Decloak scans your web app across 8 attack surfaces in seconds so you fix security gaps before they become breaches.
- Sentio
For enterprise teams: Sentio indexes meetings, documents, and decisions so managers track commitments and executives spot emerging risks without reading everything.
- Decloak
For AI builders: Decloak scans your shipped app for platform-specific security misconfigurations so you catch leaks before attackers do.