Resource 17 · SaaS isolation assessment

Multi-Tenant SaaS Security Check

Find out whether one customer could accidentally access another customer’s data in about seven minutes.

Engineering resourcePracticalYours to use

5–7 minute assessment

Is your SaaS actually isolating each customer’s data?

Complete the assessment before entering an email. You will see the risk level and headline findings immediately. Email is requested only for the complete remediation report.

Tenant isolation

Every tenant-owned record carries a trusted tenant, account, or workspace identifier.Critical isolation controlTenant access is enforced below the interface, at the API and database layers.Critical isolation controlObject IDs supplied by a client are re-authorized against the current tenant.Critical isolation controlBackground jobs, exports, admin tasks, and service-role operations re-establish tenant scope.Critical isolation control

Authentication and authorization

Organization membership and role are checked server-side on every protected request.Critical isolation controlRemoved users, expired invitations, and revoked sessions lose access promptly.Supporting production controlAdministrative actions use separate permissions and produce durable audit events.Supporting production control

Database and RLS

RLS or equivalent database controls cover every exposed table, view, RPC, and storage path.Critical isolation controlCross-user and cross-tenant negative tests prove reads, writes, inserts, and deletes are denied.Critical isolation controlService-role keys and privileged database functions stay server-side and reapply authorization.Critical isolation control

APIs and integrations

Webhooks verify signatures, reject replay, and process repeated deliveries idempotently.Supporting production controlRate limits and abuse controls cover authentication, exports, search, AI, and expensive endpoints.Supporting production controlOAuth scopes, API keys, Stripe customers, and third-party records map to the correct tenant.Critical isolation control

AI security

Retrieval and vector search apply tenant scope before candidate documents are returned.Critical isolation controlUploaded files, conversations, prompts, traces, and evaluation data remain tenant scoped.Critical isolation controlAI tool calls inherit the user’s tenant and require approval for destructive operations.Critical isolation control

Operations

Production and staging data, credentials, and integrations are isolated.Supporting production controlBackups exist and a tenant-safe restore has been tested.Supporting production controlEmployee access, secret rotation, offboarding, monitoring, and incident ownership are documented.Supporting production control

Choose the next useful step

Validate the boundary before the next customer depends on it.

Use the result to run the focused RLS and webhook checks, or ask a senior engineer to verify the highest-risk path.

Review AI prototype hardening Explore Fix It