ValidraFree test
Is your app leaking data?
A read-only test run from the outside, the way any visitor could. Result by email within a few minutes.
What the test looks at
- Secret keys sent to the browser (Supabase, Stripe, OpenAI and others)
- Supabase tables readable without logging in
- Storage buckets open to everyone
Read-only: at most one row per table, no data kept. A clean result is a good sign, not a guarantee.

Téo Brondel
Founder of Validra
I build SaaS products and review the security of apps shipped fast, often with AI tools. I receive every result and answer questions myself.