ERT-ACCESS-012
Private pages indexable
LowA01:2025CWE-200
Why it matters
Unauthenticated APIs, IDOR, admin routes, CORS. This check looks specifically for: private pages indexable.
How to fix it
Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.
How we test it
Passive — runs in the free check, looks only at what a browser can see.