| What it does | Know Your Traffic
| Security scan for Supabase apps built with AI tools
|
|---|
| Stage | MVP
| Not given
|
|---|
| Founded | Not given
| Not given
|
|---|
| Based in | Not given
| CR
|
|---|
| Pricing model | Paid
| Not given
|
|---|
| Pricing | Three subscription tiers per site: $4.99/mo for observation only, $19.99/mo for observation and dry-run blocking, $49.99/mo for automated enforcement. No free tier. 14-day free trial available.
| Free scan included with every app. Proof Report $29 one-time for Supabase apps. Monitor $12/mo (founding price until November 20, 2026, then $19/mo) for weekly outside checks on up to 3 apps. Launch Pack $79 one-time for Proof Reports on up to 3 apps with 90 days of re-scans.
|
|---|
| Key features | - Every bot and AI agent named and classified
- Verified identity checks against operators' published IP ranges
- Impact scoring showing cost in bandwidth versus earnings from referrals
- Never-block-search interlock protecting search engine rankings
- Automatic handling of new scrapers and impostors via standing policy rules
- Crawl-spike throttling with automatic release
- API access and webhooks at highest tier
| - Read-only security scan checking for exposed tables, API keys, and files
- Two-user cross-account access testing as signed-in users
- Automated privilege escalation testing
- Dated evidence report for customers and compliance
- Rerunnable curl requests for each finding
- Weekly monitoring of outside security checks
- Support for apps without Supabase
- No service role key required
- Test data marked and removed automatically
- 14-day refund guarantee
|
|---|
| What makes it different | - Fails open — if Frenemy goes down, your site serves normally without any dependency on the service
- Verified search engines cannot be blocked by default, protecting SEO rankings
- Single kill switch turns off all enforcement instantly without deploy or tickets
- Transparent data alignment — only revenue is subscriptions, so incentive is to be worth it
- Works across multiple platforms with same classification engine
| - Tests live apps as two real users, not just configuration linting
- Built-in checks mostly read setup; Preflight signs in as two users and tries to read across them
- No code upload or service role key needed
- Automated checks with human-readable fix prompts and SQL
|
|---|
| Free plan | Not given
| Not given
|
|---|
| Open source | Not given
| Not given
|
|---|
| Platforms | Not given
| Not given
|
|---|
| Public API | Not given
| Not given
|
|---|
| Community votes | 0 | 0 |
|---|
| DR (Domain Rating by Ahrefs) | 6 ● no change since last check | Not checked yet ● no change since last check |
|---|
| Trust Flow (Majestic) | 9 | 0 |
|---|
| Citation Flow (Majestic) | 26 | 0 |
|---|
| Referring domains (Majestic) | 83 | 0 |
|---|
Frenemy
Preflight