Security
The mistakes that leak data are not possible to make.
Safety is built into how apps are made, not added as a step someone can skip.
Access rules
There is no table without a rule.
In most AI app builders, access rules are a separate step the agent can forget. In Firekit a table cannot exist without one.
Every device enforces the same rules.
Roles are written once in plain words and checked on every phone and laptop, not only on a server.
Secrets
Secrets never live in your app’s code.
Keys for payments, email and other services are stored apart from the app and never shipped to a device that should not have them.
You can see the state of your app.
Manage shows every rule, every secret in use and a security line on every screen. What the site promises, the app shows.
Encryption
Locked on your device, before it goes anywhere.
Data is encrypted at rest on each device and in transit between them. Only your devices hold the keys.
What the relay can read: nothing inside.
It sees that a change happened and where it goes. It cannot see what the change says.
Sign-in and reporting
No passwords to steal.
You sign in with a passkey: Face ID, Touch ID or your device PIN. A magic link gets you to your first passkey.
Found a problem? Tell us.
Write to security@firekit.dev. We answer every report, fix what is real and credit you if you want it.