I will audit and secure your vibe coded firebase app rules keys and costs
Full stack web apps with Firebase and AI in English and Spanish
About this Gig
Is your Firebase app open to anyone? Open Firestore rules, unrestricted API keys and missing budget alerts are how small apps get abused and billed.
I audited my own app, LFG (Latino Foodie Guide, a bilingual community app in pre-launch), with a 4-layer method and found 14 issues, from exposed admin access to unprotected sign-ups. All are fixed and covered by automated tests. It now runs an abuse dashboard, a content review queue and daily budget caps.
WHAT I CHECK
Firestore and Storage security rules
Authentication settings
Cloud Functions exposed to the public
API keys, quotas and Google Cloud budget alerts
Bots, spam and abuse on sign-ups and forms
Backups
WHAT YOU GET
A clear report: every risk ranked high, medium or low
Step-by-step fixes, or I apply them for you (Standard and Premium)
Tests so the fixes stay fixed
I use AI tools (Claude) to review faster and I verify each finding myself. I need read access to your Firebase project (I will guide you to give it safely, and you remove it after delivery). Report in English or Spanish.
Cloud provider:
Google Cloud Platform
Expertise:
Backup
•
Debugging
•
Configuration
My Portfolio
FAQ
What access do you need to my project?
For the Audit, Viewer access to your Firebase project is enough. For Audit + Fix and Hardening I need temporary Editor access. I send you a 2-minute guide, and you remove my access after delivery.
Will the fixes break my app?
You approve the list of fixes before I apply anything. I test each rule change against your app's real flows, and Hardening adds automated tests so future updates don't reopen the same holes.
Do you change my app's features?
No. This gig covers security rules, keys, quotas, billing alerts, backups and abuse limits. If you need new features or code rewrites, I send you a custom offer first.
My app is not on Firebase. Can you help?
This gig is for Firebase and Google Cloud only. Message me before ordering and I will tell you honestly if I can help.

