Multi-Tenancy Audit
saas-multi-tenancy · v1.1.1 · paid
Multi-tenant data isolation assessment covering tenant boundary enforcement across all layers and safe shared resource management.
Data Isolation
data-isolation · weight 0.35
- criticalEvery database query is scoped to the active tenantab-002332
- criticalNo cross-tenant data visible in API responsesab-002334
- criticalTenant context is set from authenticated session, not client inputab-002330
- highFile storage is segregated by tenantab-002315
- highCache keys include the tenant identifierab-002320
Tenant Boundaries
tenant-boundaries · weight 0.3
- highTenant switching does not leak prior tenant dataab-002319
- highSearch and filter do not cross tenant boundariesab-002318
- highCross-tenant resource access is blockedab-002316
- mediumBackground jobs are scoped to a single tenantab-002317
- mediumWebhook payloads do not include other tenants' dataab-002326
- lowRate limiting is applied per tenantab-002328
Shared Resources
shared-resources · weight 0.2
Tenant Management
tenant-management · weight 0.15
- highTenant deletion cascades completelyab-002341
- lowAudit logs are tenant-scopedab-002342
- lowAdmin can view but not modify tenant data without an audit trailab-002352
- lowURL patterns do not expose internal tenant IDsab-002354
- lowTenant data export is scoped to the requesting tenantab-002350
- lowTenant creation is validated and rate-limitedab-002351