Automatically generate and run attack vectors against your database's Row Level Security policies to find vulnerabilities before they're exploited.
✓ Works with Supabase•✓ No code changes required•✓ Actionable results
Clamp makes it easy to test your database's Row Level Security policies and fix vulnerabilities.
Provide your database schema, RLS policies, and additional context about your application's security requirements.
We automatically create test queries that simulate how malicious users might try to bypass your security rules that you can test directly against your database.
Review failed tests and generate new RLS policies to secure your database.
-- Before: Vulnerable RLS policy
CREATE POLICY "Users can only see their own data"
ON "public"."profiles"
FOR SELECT
TO authenticated
USING (auth.uid() = user_id);
-- After: Fixed RLS policy with proper type casting
CREATE POLICY "Users can only see their own data"
ON "public"."profiles"
FOR SELECT
TO authenticated
USING (auth.uid()::text = user_id::text);
Everything you need to secure your database's Row Level Security policies.
Our platform not only identifies security issues but also suggests improved RLS policies to fix the vulnerabilities, complete with explanations of why they work.
CREATE POLICY "Users can view profiles" ON profiles FOR SELECT USING (true);
CREATE POLICY "Users can view profiles" ON profiles FOR SELECT USING (auth.uid() = user_id OR is_public = true);
Start securing your database for free. Upgrade to Pro for advanced security features and authenticated role testing.
Perfect for getting started
For those who need more security
All plans include unlimited RLS policy testing and generated fixes.