firestore-security-rules-auditor

Automated security auditor for Firestore rules using red-team methodology and structured scoring.

• Evaluates rules against a mandatory checklist covering update bypasses, authority sources, business logic alignment, storage abuse, and type safety
• Applies a 1–5 severity scale (critical to secure) with detailed findings for each identified vulnerability
• Identifies privilege escalation risks, data integrity flaws, and field-level vs. identity-level security gaps
• Includes admin bootstrapping validation to distinguish legitimate hardcoded admin checks from escalation risks
• Returns structured JSON assessment with score, summary, and actionable recommendations for each finding