Security
Exposed data via Bubble’s data API. Privacy-rule gaps that leak fields users shouldn’t see. Public endpoints that should be private. Common signature-verification misses.
- →Data API exposure check
- →Privacy rule audit (where detectable)
- →Webhook security flags