How do I check if RLS is enabled on my Supabase tables?
You can check RLS status in the Supabase Dashboard by navigating to the Table Editor and looking for the RLS badge on each table. Alternatively, you can run the SQL query SELECT tablename, rowsecurity FROM pg_tables WHERE schemaname = 'public' in the SQL Editor to see which tables have RLS enabled. Tables showing rowsecurity as false are exposed to any authenticated or anonymous request through the API. Supabase also shows a warning banner in the dashboard when tables lack RLS. UNPWNED reports confirmed public exposure from bounded anonymous-access checks; it does not directly read the complete RLS state of every table.
Check your Supabase app now
Run free security scanLast reviewed: 2026-04-07. Based on publicly available security research and UNPWNED scan telemetry.
