Skip to main content

Bundles/saas-multi-tenancy

Multi-Tenancy Audit

saas-multi-tenancy · v1.1.0 · paid

Multi-tenant data isolation assessment covering tenant boundary enforcement across all layers and safe shared resource management.

Data Isolation

data-isolation · weight 0.35

Every database query is scoped to the active tenant
ab-002332
critical
No cross-tenant data visible in API responses
ab-002334
critical
Tenant context is set from authenticated session, not client input
ab-002330
critical
File storage is segregated by tenant
ab-002315
high
Cache keys include the tenant identifier
ab-002320
high

Tenant Boundaries

tenant-boundaries · weight 0.3

Tenant switching does not leak prior tenant data
ab-002319
high
Search and filter do not cross tenant boundaries
ab-002318
high
Cross-tenant resource access is blocked
ab-002316
high
Background jobs are scoped to a single tenant
ab-002317
medium
Webhook payloads do not include other tenants' data
ab-002326
medium
Rate limiting is applied per tenant
ab-002328
low

Shared Resources

shared-resources · weight 0.2

Shared resources do not leak between tenants
ab-002327
high
Invitation flow validates tenant membership
ab-002329
high
Tenant settings are isolated
ab-002343
low

Tenant Management

tenant-management · weight 0.15

Tenant deletion cascades completely
ab-002341
high
Audit logs are tenant-scoped
ab-002342
low
Admin can view but not modify tenant data without an audit trail
ab-002352
low
URL patterns do not expose internal tenant IDs
ab-002354
low
Tenant data export is scoped to the requesting tenant
ab-002350
low
Tenant creation is validated and rate-limited
ab-002351
low