Firebase Cost and Security Implications?

Firebase Cost and Security Implications?

  

We may use Firebase in our enterprise to allow interactive chat in a mobile application we're developing.  Has anybody evaluated the cost and security implications of using this Google product?  We're not sure of the security risks and whether or not it will incur significant usage fees.  Thanks!

Hi Joel,

I am only use Firebase for small volume of data and the free tier was enough to my use case. But the decision to adopt Firebase or any other google product in cost aspects depends of the ammount of data you want to work.   I advice you to check google princing for that and try to evaluate the sizing of your application.  It is fully dependent of the use cases you want to reach.

https://firebase.google.com/pricing/?gclid=CjwKCAjwwdTbBRAIEiwAYQf_E22LcfQM9mRWApUSsZSOAVBP_S52QGHOMNIqL7spbdNitkX3lZKpgBoCpMcQAvD_BwE 


Regarding the security, the firebase will be used by a rest API and all data will be shared between your app and the google servers. It is not a good idea to exchange the messages in plain text, because they can be intercepted. 

To address this issue, you could combine the usage of firebase with CryptoAPI (https://www.outsystems.com/forge/component/437/cryptoapi/?Unfollow=False) for example. So, all your message will be encrypted and you will not expose your sensitive information. 


Regards

Fabio Fantato


 


Thank you for your information, Fábio.



Fábio Fantato wrote:

Hi Joel,

I am only use Firebase for small volume of data and the free tier was enough to my use case. But the decision to adopt Firebase or any other google product in cost aspects depends of the ammount of data you want to work.   I advice you to check google princing for that and try to evaluate the sizing of your application.  It is fully dependent of the use cases you want to reach.

https://firebase.google.com/pricing/?gclid=CjwKCAjwwdTbBRAIEiwAYQf_E22LcfQM9mRWApUSsZSOAVBP_S52QGHOMNIqL7spbdNitkX3lZKpgBoCpMcQAvD_BwE 


Regarding the security, the firebase will be used by a rest API and all data will be shared between your app and the google servers. It is not a good idea to exchange the messages in plain text, because they can be intercepted. 

To address this issue, you could combine the usage of firebase with CryptoAPI (https://www.outsystems.com/forge/component/437/cryptoapi/?Unfollow=False) for example. So, all your message will be encrypted and you will not expose your sensitive information. 


Regards

Fabio Fantato