Pricing

from $5.00 / 1,000 security findings

Firebase Firestore Security Audit - Find if-true Leaks Free

Free Firebase Firestore security audit: static analyzer for firestore.rules + a live anonymous probe. Detects 'if true' wide-open rules, expired test-mode, auth-only patterns and open storage, then confirms which are truly exposed. HTML report with paste-ready fix snippets. By Renzo Madueno.

Pricing

from $5.00 / 1,000 security findings

Rating

0.0

(0)

Developer

Renzo Madueno

Actor stats

Bookmarked

Total users

Monthly active users

5 hours ago

Last modified

Firebase Firestore Security Audit - Find Open Rules Free API through CLI

The Apify CLI is the official tool that allows you to use Firebase Firestore Security Audit - Find if-true Leaks Free locally, providing convenience functions and automatic retries on errors.

Install Apify CLI

Using installation script (macOS/Linux):

$curl -fsSL https://apify.com/install-cli.sh | bash

Using installation script (Windows):

$irm https://apify.com/install-cli.ps1 | iex

Using Homebrew:

$brew install apify-cli

Using npm:

$npm install -g apify-cli

Other API clients include:

Firebase Firestore Security Audit - Find if-true Leaks Free API in Python

Firebase Firestore Security Audit - Find if-true Leaks Free API in JavaScript

Firebase Firestore Security Audit - Find if-true Leaks Free OpenAPI definition

Firebase Firestore Security Audit - Find if-true Leaks Free API

Firebase Firestore Import

danielwebr/firebase-firestore-import

This actor is designed to simplify the process of transferring data from an Apify dataset into a Firebase Firestore collection. Simply configure the actor with your Firebase credentials, Firestore collection ID, and dataset ID, and it will handle the rest, including optional data transformations.

Daniel Wébr

🗃️ PocketBase Security Scanner - Find Leaks

renzomacar/pocketbase-security-scanner

Probes a public PocketBase instance for misconfigured collection rules. Detects collections readable without auth via /api/collections/*/records. Returns counts + curl reproducer. Counts only, no data exfiltrated. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

📦 Payload CMS Security Scanner - Find Leaks

renzomacar/payload-security-scanner

Probes a public Payload CMS instance for collections readable without auth. Default templates leave read access wide open during development. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

Federal Register Scraper — US Rules & Notices

ponderable_hydrometer/federal-register-scraper

Scrape the US Federal Register — rules, proposed rules, notices and presidential documents with title, agencies, dates, abstract and full text. Filter by type and date. Free, no key.

Ponderable Hydrometer

Supabase RLS Security Scanner — Find anonymous data leaks

renzomacar/supabase-rls-scanner

Probes a public Supabase project for Row-Level-Security misconfigurations. Detects tables readable by the anon key — the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

🚀 Strapi Security Scanner - Find Public Leaks

renzomacar/strapi-security-scanner

Probes a public Strapi instance for misconfigured Public role permissions. Detects content-types readable without auth via /api/{collection}. Returns counts + curl reproducer. Counts only. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

🧭 Directus Security Scanner - Find Leaks

renzomacar/directus-security-scanner

Probes a public Directus instance for misconfigured Public-role permissions. Detects collections readable without auth via /items/{collection}. Returns counts + curl reproducer. Counts only. -- By Renzo Madueno, https://rotatepilot.com

Renzo Madueno

Firestore Import

apify/firestore-import

Seamlessly import data from Apify datasets into Firebase Firestore database. This integration allows full control over document IDs, conflict resolution (overwrite, merge, skip), and data transformation using a custom JavaScript function.

Apify

5.0

Federal Register Monitor: New Rules & Notices

scrapemint/federal-register-monitor

Track new US federal rules, proposed rules, notices and presidential documents from the official Federal Register API. Filter by keyword, agency, document type and date. Monitor mode emits only documents you have not seen before - run it on a schedule for a clean regulatory feed. No API key.