Two new ways to access the security dashboard

Announcements
1

Hi everyone,

I’m Lindsay, a product manager at Bubble.

We’ve added two new ways to access the security dashboard directly from your editor. These make it easier to run security checks without leaving your app.

How to access the security dashboard

You now have two new ways to access and run security checks on your app:

  1. Shield icon in left sidebar: You’ll see a new shield icon in your editor’s left sidebar that takes you directly to the security dashboard.

sidebar-entry-point
sidebar-entry-point498×934 6.36 KB

  1. Security check button during deploy: Before you deploy, you’ll see a button to run a security check so you can catch issues before your app goes live.

deploy-modal-entry-point
deploy-modal-entry-point1232×962 68 KB

Both new entry points take you to the same comprehensive security dashboard that scans for data leaks, exposed API keys, unsafe API configurations, and other common vulnerabilities.

What this means for you

These changes more naturally integrate the security dashboard into your building experience. Instead of remembering to run security checks as a separate task, you can now initiate them right from where you’re already working.

If you haven’t run a security scan recently, now’s a great time to check if your app has any vulnerabilities using scan.bubble.io or the new entry points.

Happy building!

— Lindsay

14 Likes
Monthly Community Update - January 2026
2

Cool! Waiting for the API connector now :wink:

7 Likes
3

hello @lindsay.esterman

I ran a security test and all security issues aren’t real. Example :

image
image796×844 26.8 KB

image
image718×710 23 KB

image
image2068×966 94 KB

Can you check with the team why there’s only irrevelant issues ? thx

4

What are your other privacy rules?

5

Based on User’s field like “current user’s agency is this document agency” for example.

@georgecollier

6

If the Document’s Agency field is empty, and the Current User’s Agency is empty (e.g they’re logged out) then that data could become exposed which is what’s happened here.

Filter in your editor for Documents where Agency is empty and you’l see the records

7

PS @georgecollier I’ve triggered the buildprint audit I need to check it to see what’s come from there :rofl:

8

It shouldn’t be empty but you are right it could happen