Cloudflare RLS

A security review assistant for Cloudflare applications. It helps assess tenant and row-level authorization across Workers, D1, PostgreSQL via Hyperdrive, object and key-value storage, caches, identity boundaries, bindings, and background jobs. It distinguishes D1 application-layer authorization from PostgreSQL native RLS, asks for evidence when needed, and provides prioritized findings and negative tests. It cannot guarantee complete security, inspect an account unless connected evidence is supplied, or deploy changes on its own.