Findings

Every shipped rule at a glance

All nine shipped rules with one-line summaries and links to the full documentation for each. Nothing is counted as coverage that no rule performs.

Severity levels: what critical, high and medium mean

Which rules are critical, high or medium, and why the ordering sometimes disagrees with a reasonable first impression.

Three core RLS bugs that look alike from outside

RLS disabled, RLS with no policies, and a policy that always evaluates true are three different failures. Each one needs a different fix.

False positives we suppress on purpose, and why

System schemas, RESTRICTIVE tautologies, service_role-only policies and empty probe responses are suppressed deliberately. The reasons, in full.

Remediation SQL: generated from columns, applied safely

Remediation SQL is generated from your actual columns and always includes FORCE ROW LEVEL SECURITY. How to apply it, and undo it, safely.

Performance findings: predicates and per-row auth calls

Unindexed policy predicates and bare auth.uid() calls are the two performance rules. What they mean and the size of the win, stated honestly.

Disputing a finding

Think a finding is wrong? Email info@getveristria.com with the details and an engineer re-checks it against your snapshot and the rule.