Emerald Red Team

ERT-PRIVACY-001

PII discoverable without login

HighA01:2025CWE-359

Why it matters

PII without auth, session replay, undisclosed sharing. This check looks specifically for: pii discoverable without login.

How to fix it

Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.

How we test it

Passive — runs in the free check, looks only at what a browser can see.

Does your app have this problem?

The free Quick Check tests for it.

Scan my app — free