All guides

Create a read-only PostgreSQL role

Two minutes of SQL that makes "it cannot write" a property of your database rather than a promise made by an application.

Find your PostgreSQL connection string

Where the string lives on Supabase, Neon, Railway, Render, Heroku and a plain server — and which of the two Supabase gives you to pick.

Read your first scan

What the report is telling you, why an empty table is not a clean one, and which sentences are the ones that matter.

Start here if you have nothing yet

In order: create a read-only role, get the connection string, then run the scan and read what came back. The whole path takes about ten minutes and needs Node 22 or newer.