Operate
Security
Scan your backend with security advisors, audit dependencies, and fix findings with the agent.
The Security section runs two kinds of scans. Basic scan checks your live backend with security and performance advisors (missing RLS, exposed objects, slow patterns). Deep scan adds an npm audit of your project's dependencies. Findings are ranked by level, and each one has a Fix with AI button that hands the full finding to the agent, typically fixed with a migration.
Reading the results
- Advisor findings show a level (ERROR, WARN, INFO) and a kind (security or performance), with a description and a remediation guide link.
- Dependency findings list the package, severity (critical to low), the advisory, the affected range, and whether it is a direct dependency.
- Run a scan before publishing; the publish flow also includes its own pre-publish security scan.