How do I check if RLS is enabled on my Supabase tables?

You can check RLS status in the Supabase Dashboard by navigating to the Table Editor and looking for the RLS badge on each table. Alternatively, you can run the SQL query SELECT tablename, rowsecurity FROM pg_tables WHERE schemaname = 'public' in the SQL Editor to see which tables have RLS enabled. Tables showing rowsecurity as false are exposed to any authenticated or anonymous request through the API. Supabase also shows a warning banner in the dashboard when tables lack RLS. UNPWNED automatically detects tables without RLS and reports them as critical security findings.