ERT-PRIVACY-001
PII discoverable without login
HighA01:2025CWE-359
Why it matters
PII without auth, session replay, undisclosed sharing. This check looks specifically for: pii discoverable without login.
How to fix it
Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.
How we test it
Passive — runs in the free check, looks only at what a browser can see.
