Emerald Red Team

ERT-BAAS-013

Firestore collection readable without auth

CriticalA01:2025CWE-284

Why it matters

Open tables, missing RLS, public buckets, open Firebase rules. This check looks specifically for: firestore collection readable without auth.

How to fix it

Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.

How we test it

Passive — runs in the free check, looks only at what a browser can see.

Does your app have this problem?

The free Quick Check tests for it.

Scan my app — free