Summary
- Automated security auditor for Firestore rules using red-team methodology and structured scoring.
- Evaluates rules against a mandatory checklist covering update bypasses, authority sources, business logic alignment, storage abuse, and type safety Applies a 1–5 severity scale (critical to secure) with detailed findings for each identified vulnerability Identifies privilege escalation risks, data integrity flaws, and field-level vs. identity-level security gaps Includes admin bootstrapping validation to distinguish legitimate hardcoded admin checks from escalation risks Returns structured JSON assessment with score, summary, and actionable recommendations for each finding