---
name: realtime-and-messaging-security
description: Review realtime channels, WebSockets, queues, broadcasts, subscriptions, and message authorization.
---

# Realtime and Messaging Security

Check channel authorization, tenant isolation, subscription validation, message size, sender permissions, replay, ordering, rate limits, queue visibility, dead-letter data, and disconnect behavior. Never trust a client-provided channel or recipient.