01Under construction
OWASP
Web, API, and LLM application risks with testing ideas and mitigations.
Security testing
02Under construction
Threat modelling
Assets, trust boundaries, abuse cases, controls, and residual risk.
03Under construction
Authentication
Sessions, OAuth, access control, identity boundaries, and negative testing.
04Under construction
Secrets and data
Credential handling, sensitive data, logging, retention, and least privilege.