Can one customer see another customer’s data?
The most damaging leak in an AI-built app is when every customer can read every other customer’s data: one curious user, no attacker needed. It happens when the rule about who may read a table says "anyone signed in" instead of "only the owner". The outside check finds tables open to anyone at all; the deepest version signs in as a test user and photographs what they can reach, with every word blanked.
Free. No sign-up. We only look at what any visitor can already see.
What this check can and cannot see
The free outside check finds data readable without any login. Seeing what one signed-in user can reach across another’s account needs you to prove the site is yours and switch on the deeper check, because it acts as a real user. We never change anything.
What we will never doChange anything in your app, or keep your customers’ data. A finding holds a count, the column names, and one sample blanked past its first two characters.