Built for
Made for Next.js + Supabase apps. We also work with Vite, Nuxt, SvelteKit, Remix, Astro, and TanStack Start. Want something else? Tell us.
What Athena checks
- Row-Level Security gaps
- Exposed secrets and API keys
- Broken Object-Level Authorization (BOLA)
- Auth bypass paths
- Admin functions reachable from the internet
- SQL injection and unsafe queries
- + more across 22 weakness classes
How it works
Connect
Connect your GitHub repo and Supabase project. Read-only OAuth.
Scan
Athena runs 22 weakness checks through a multi-stage pipeline.
Fix
Get a Claude Code fix prompt for each finding.