For Firebase
Hack your Firebase app before someone else does.
Apps running on Firebase ship fast. These are the problems we check for first.
Common risks
- Test-mode security rules left on
- Readable Realtime Database
- Server secrets in the client
Checks that matter most
- ERT-BAAS-014Firebase Realtime Database readableCritical
- ERT-BAAS-008Supabase Storage bucket public or listableHigh
- ERT-SECRETS-001Server secret in client JavaScriptCritical
Emerald Red Team isn't affiliated with or endorsed by Firebase.