
Cybersecurity · 28 August 2026 · 7 min read
Fail-closed multi-tenancy: Postgres Row-Level Security, done properly
In multi-tenant software, the most dangerous bug is one tenant seeing another's data. We made that entire class of bug fail closed by moving tenant isolation into the database with Row-Level Security, as a backstop to, not a replacement for, application-level scoping.
Read the article


