Security posture

Derived deterministically from the latest scan of Acme Production.

Compare scans

Posture Score

0/100

Needs Attention

-18 pts since previous scan

Score Legend

95-100Strong

85-94Good

65-84Fair

40-64Warning

0-39Critical

Category Health

RLS Security: 90
Tenant Isolation: 52
Functions: 90
Permissions: 67
Storage: 90
Views: 90

passed checks

highest priority

Critical

Potential cross-tenant access through SECURITY DEFINER function

public.get_invoice(uuid)

public.get_invoice(uuid) runs with the privileges of its owner, is executable by authenticated, and reads public.invoices without an ownership constraint in the evaluated path.

Investigate View Attack Path

open findings

CriticalPotential cross-tenant access through SECURITY DEFINER functionpublic.get_invoice(uuid)
HighAnonymous role granted access to public.webhook_endpointspublic.webhook_endpoints
HighAnonymous role granted access to public.pricing_planspublic.pricing_plans
MediumPolicy "Users can view profiles" does not constrain rows to a tenantpublic.profiles
MediumINSERT policy "Members create tickets" has no WITH CHECKpublic.support_tickets
MediumMutable search_path on public.refresh_usage_totals()public.refresh_usage_totals()

Unlock the full security report

Buy full report