Contact Us

Firebase Security Rules audit, with the fixes as a pull request

Apps built quickly on Firebase often ship rules that check whether someone is signed in, not whether the data is theirs. This audit tests your Firestore and Storage rules the way an attacker would, on the emulator, and hands back a fix that passes the tests.

Pay $950 & start

$950 fixed price, 5 business days from repo access. Runs on the emulator only.

No call needed. Questions go to contact@app369.com; we reply by email, usually within one business day.

This fits when

  • Your rules mostly check request.auth != null
  • You added teams, workspaces or roles after launch
  • A customer, investor or security questionnaire asks how tenant data is isolated
  • You can’t say for sure what a signed-in user could read with the Firebase SDK
Offer 02

Firebase Security Rules Audit + Fix PR

Apps built quickly on Firebase often ship with rules that let one signed-in user read or edit another customer’s data. This audit tests whether yours does, and fixes what it finds.

$950
fixed price, 5 business days

Scope

  • Firestore and Storage rules, plus up to 15 Cloud Functions, in one Firebase project

You get

  • A written role and tenant access model
  • An emulator test suite that tries cross-user reads and writes, cross-tenant reads and writes, and role escalation
  • A report ranked by severity
  • A pull request with rule fixes that passes the suite

Not included

  • Compliance certification
  • Infrastructure outside Firebase
  • App refactors

Delivery

5 business days.

Everything runs on the emulator or test data only, never your production records.

This is a technical review, not a compliance certificate.

Pay $950 & start

Not sure it fits? Email a question about this offer; we reply by email, usually within one business day.

How it works

  1. Step 1

    Pay and share the repo

    Repo access to the Firebase project’s rules and functions is all that’s needed. No production access.

  2. Step 2

    Write the access model

    Who should read and write each collection and Storage path, by role and tenant, written down so you can check it.

  3. Step 3

    Attack it on the emulator

    A test suite tries cross-user reads and writes, cross-tenant reads and writes, and role escalation against your current rules.

  4. Step 4

    Report and fix PR

    Findings ranked by severity, and a pull request with rule fixes that passes the suite. The suite stays in your repo for future changes.

Questions before you pay

Is this a compliance certificate?
No. It is a technical review of your rules with tests and fixes, not SOC 2, HIPAA or any other certification.
How many Cloud Functions are covered?
Firestore and Storage rules plus up to 15 Cloud Functions in one Firebase project. Larger projects get a written quote first.
Will you touch production?
No. Everything runs on the Firebase Emulator Suite or test data. You deploy the fixed rules yourself.
Do I need a call before I pay?
No. The scope, price and delivery time are on this page, and everything happens in writing. If you want to talk live, calls cost $100 per 15 minutes, paid upfront.
Who owns what you deliver?
You do. The code, videos and files delivered under this offer belong to you once paid.

Ready to start?

Pay online and send what the work needs by replying to the Stripe receipt. Simon, who builds and runs the Flutter and Firebase SaaS Workspace369, does the work himself.

Pay $950 & start

Further reading

Other fixed-price offers

Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.