Supahound pricing
The posture scan will be free for up to 3 Supabase projects. Runtime detection, which catches attacks while they happen, will cost $29 per project per month, and agencies will pay $19 per project per month with a 10-project minimum. Supahound is in early access: sign up free now, and features marked Coming soon switch on as they ship.
Last updated
Free
See if you are exposed.
$0 forever
- Daily posture scan for up to 3 projectsComing soon
- RLS coverage, Security Advisor findings, exposed tables and viewsComing soon
- Email alertsComing soon
- Weekly digestComing soon
- No credit card
Builder
Know when you are attacked, within minutes.
$29 per project / month
- Everything in Free
- Cross-tenant read detection, polled every 1–2 minutesComing soon
- Service-key misuse detectionComing soon
- Credential stuffing detectionComing soon
- Scraping and bulk-read detectionComing soon
- Database tampering detectionComing soon
- Plain-English incidents with a fix you can pasteComing soon
- Signed webhook alerts (Slack, Discord)Coming soon
- 30-day incident historyComing soon
Agency
Watch every client app from one place.
$19 per project / month, 10-project minimum
- Everything in Builder
- Multi-project dashboardComing soon
- Client reportsComing soon
- Lower rates at 25+ projectsComing soon
Prices in US dollars, billed monthly. Taxes may apply.
What does each plan include?
| Feature | Free | Builder | Agency |
|---|---|---|---|
| ProjectsComing soon | Up to 3 | Per project | 10 minimum |
| Posture scan (RLS, Security Advisor, exposed tables)Coming soon | Daily | Daily | Daily |
| Runtime detectors (cross-tenant reads, service key, credential stuffing, scraping, tampering)Coming soon | — | Every 1–2 minutes | Every 1–2 minutes |
| Plain-English incident with a paste-ready fixComing soon | — | Yes | Yes |
| Email alertsComing soon | Yes | Yes | Yes |
| Signed webhook alerts (Slack, Discord)Coming soon | — | Yes | Yes |
| Weekly digestComing soon | Yes | Yes | Yes |
| Incident historyComing soon | — | 30 days | 30 days |
| Multi-project dashboard and client reportsComing soon | — | — | Yes |
Frequently asked questions
- What counts as a project?
- One Supabase project, identified by its project ref. A production and a staging project are two projects.
- Is the free plan really free?
- Yes. The free plan runs a daily posture scan on up to 3 projects with email alerts and a weekly digest. It does not need a credit card and it does not expire.
- Why is runtime detection paid?
- Runtime detection polls each project's logs every 1–2 minutes and runs every detector on every poll. That costs real compute per project. The posture scan runs once a day, so it costs very little.
- Can I cancel?
- Yes. Cancel any time. Your paid plan runs to the end of the billing period, then the project drops back to the free posture scan.
- Do you offer a trial of runtime detection?
- Start on Free and see your posture findings first. Email hello@flywheel.so if you want to test runtime detection on a project before you pay.
- How does the agency plan work?
- Agency costs $19 per project per month with a 10-project minimum, so it starts at $190 per month. You get one dashboard for every client project and client-ready reports. Rates drop further at 25+ projects.
Find out if someone is abusing your app
Connect your Supabase org read-only. The free posture scan runs in minutes. No credit card.