Docs

Firebase Integration

Analyze Firebase project security — Firestore rules, hosting, auth settings.

#Setup

  • 1

    Create a service account key

    Go to console.firebase.google.com → Project settings → Service accounts. Click Generate new private key and download the JSON file.
  • 2

    Connect in Vergate

    Go to Integrations, click Connect on Firebase. Paste the entire service account JSON into the Service Account JSON field and enter your Project ID.
  • 3

    Verify

    Click Test Connection— Vergate performs a JWT token exchange against Google's OAuth endpoint to validate the key.

    • #What It Scans

    Service account authentication — Is the credential valid and able to mint tokens?
    Firestore rules — Are database rules publicly writable or over-permissive?
    Hosting sites — What Firebase Hosting sites exist under the project?

    Warning. The service account JSON grants full project access. Treat it like a password — revoke it in the Firebase console if it's ever exposed.
    Tip. Prefer a scoped service account with only the Cloud Datastore User role if you only need rules auditing.