Glossary
Tenant isolation
One customer's data staying entirely out of another customer's account.
What it means
Tenant isolation is the guarantee that account A can never see account B's rows, files or activity, whatever it asks for and however it asks. In a multi-customer app it is the promise underneath every other promise.
It breaks quietly. A page filters by account correctly while the API behind it does not. A record id in an address can be changed by hand. An export job reads the whole table. The interface looks right the whole time.
The Tea app second breach is the plain version: an endpoint returned over a million private messages because nothing checked who was asking. Testing it takes two accounts, two browsers and ten minutes. It cannot be tested from outside, so it stays Not verified on a free result.
Incidents where it mattered
No incident in the library maps to this one yet.
ShipReady is not a penetration test or a security certification. No automated check can prove an application is secure.
Last updated September 20, 2026