Installation

Install FireScan using Go or download pre-compiled binaries.

Why choose FireScan?

FireScan is a free, open-source Firebase vulnerability scanner that automates security testing for Firebase applications. Instead of manually checking Firebase security rules or writing custom scripts, FireScan provides a ready-to-use command-line tool that scans Realtime Database, Firestore, Cloud Storage, and Cloud Functions in minutes.

Whether you need to audit Firebase security before deployment or perform regular security checks on production Firebase apps, FireScan works safely with read-only mode by default.

Requirements

• Go 1.19+ (if building from source)
• Linux, macOS, or Windows

Install with Go

go install github.com/JacobDavidAlcock/firescan/cmd/firescan@latest

This installs firescan to $GOPATH/bin. Make sure it's in your PATH.

Build from source

git clone https://github.com/JacobDavidAlcock/firescan.git
cd firescan
go build cmd/firescan/main.go
./firescan

Pre-compiled binaries

Download from GitHub Releases.

Available for:

• Linux (x64, ARM64)
• macOS (x64, Apple Silicon)
• Windows (x64)

Verify installation

firescan --help

You should see the FireScan console.

Update

go install github.com/JacobDavidAlcock/firescan/cmd/firescan@latest

Next

Quick Start - Run your first scan