- Ensure MFA is enabled for organization members
- Ensure SSO/SAML is enforced for organization login
- Ensure publishable/secret API keys are rotated periodically
- Ensure legacy anon/service_role API keys are not still in use
- Ensure Row Level Security (RLS) is enabled on all public schema tables