Overview of Flusk Vault Security Features

Flusk Vault offers a range of security verifications to ensure your app remains safe and secure. Below are some of the key security points covered by our tool:

Issue	Description	Doc	Required Permissions
Privacy Rules Definition	Check if Privacy Rules are properly defined for each datatype	Open	`🟠 Collaborator`
Public Sensitive Fields	Check if any sensitive field (eg. user personal data) is not properly protected through Privacy Rules	Open	`🟢 None`
Database Leaks	Identify database leaks from misconfigured searches on pages, reusable elements and Data API.	Open	`🟢 None`
Page Access Protection	Check if sensitive pages (admin dashboards,...) have proper redirection.	Open	`🟢 None`
Bubble API Tokens	Managing internal API token granting full admin permissions.	Open	`🟠 Collaborator`
Bubble Collaborators	Check for any unauthorized collaborators	Open	`🟠 Collaborator`
Unsafe Google Maps API token	Check if your public Google Maps key has proper HTTP referrers	Open	`🟢 None`
API Connector Sensitive Parameter	Check for sensitive parameters in API call (eg. API key, a private unique ID, an endpoint...)	Open	`🟢 None`
Visible URL in API call	Check for sensitive URLs in API calls.	Open	`🟢 None`
Backend Workflows Protection	Check if your back-end workflow is publicly exposed.	Open	`🟢 None`
Sensitive clear data in workflows	Check if you have clear data in a login action.	Open	`🟢 None`
Assign temp password vulnerability	Check for Temporary password vulnerability to prevent their use in unintended contexts.	Open	`🟢 None`
Editor Privacy	Check if your app's editor is public to avoid displaying your app's structure (databases, tokens,...)	Open	`🟢 None`
Password Policy	Make sure your password policy is strong enough to protect your user data.	Open	`🟢 None`
Swagger Privacy	Check if your Swagger file leaks sensitive information on endpoints, parameters, or the structure of your API response.	Open	`🟢 None`
Test version protection	Check if your test version is protected by a username/password combination.	Open	`🟢 None`
Default username/password combination	Check if your username/password combination is not the default combination.	Open	`🟠 Collaborator`
Public file uploader	Make sure your file uploaders are uploading private files	Open	`🟢 None`
Public picture uploader	Make sure your picture uploaders are uploading private pictures	Open	`🟢 None`
iFrame restriction	Make sure your app doesn't allow to be rendered as an iFrame	Open	`🟠 Collaborator`

Data Leak issue