ERT-BAAS-013
Firestore collection readable without auth
CriticalA01:2025CWE-284
Why it matters
Open tables, missing RLS, public buckets, open Firebase rules. This check looks specifically for: firestore collection readable without auth.
How to fix it
Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.
How we test it
Passive — runs in the free check, looks only at what a browser can see.
