← SkillSafe / Rules Desk

Your firestore.rules file, read properly — then audited, planned and rewritten

Paste the rules file. Before you sign in or spend anything, a real parser runs in this browser: it walks every match block, resolves the helper functions, and tells you which paths are reachable by a stranger, by any account that can sign up, and by the document's owner. Then pick a stage.

Both examples ship with a saved model run for all three stages, so you can see the whole output — including the rewritten rules file — without signing in and without spending a credit.

nothing pasted yet
Drag a .rules file in, or Everything is read in your browser. Nothing uploads until you run a stage.

1. Audit — what these rules actually allow, and how bad that is

Paste your rules to price this stage.