Oneleet

This account is verified because it's an official organization on X. Learn more

@oneleet

Cybersecurity Compliance Without Security Theater — The all-in-one security and compliance platform for SOC 2, ISO 27001, HIPAA, GDPR, CIS, and more.

San Francisco oneleet.com Joined April 2015

124 Following 1.2K Followers 222 Posts

Latest posts 5

Oneleet @oneleet 6d

We scanned 300+ Supabase instances. RLS disabled was just 25% of findings. 75% included: tables opened after signup, writes with no read access, named columns leaking data and more.

Supabase Exposure Scanning is now live in your Attack Surface Management. oneleet.com/blog/supabase-…

www.oneleet.com Supabase Exposure Scanning is Now Built into Attack Surface Management | Oneleet Oneleet now discovers your Supabase attack surface and tests what an attacker can actually do, going beyond just policy linting that Supabase Database Advisor covers.

Oneleet @oneleet Oct 7

👀 That's crazy 👀

Bryan Onel Verified account @BryanOnel86 Oct 7

Just spotted this in the wild.

I wonder who would be crazy enough to do this.

View quoted post on X

Oneleet @oneleet Oct 1

A clean desk policy. All remote.
A firewall. On one asset.
Offboarding ticket closed. The access stayed.

Others would call that audit-ready.
We would not.

We are not the same.

Oneleet @oneleet Sep 30

Eventually, someone will test your security with or without your consent.

Oneleet @oneleet Apr 3

Oneleet and @simdotai are entering into an exclusive partnership to launch the first AI-native GRC workflow solution.

This is a big step toward replacing slow, manual compliance work with intelligent workflows built for enterprise scale.