Purpose

Reduce real security and privacy risks in Android/Firebase apps.

When to use

• Auditing sensitive data handling.
• Reviewing Firebase rules.
• Checking secrets, logs or permissions.
• Adding biometric or local encryption flows.

Inputs to inspect

• Data classification and threat model.
• Rules files and storage paths.
• Logs, analytics and Crashlytics usage.
• Permissions and local storage.

Required workflow