django-security

Harden Django authentication by implementing custom user models, permission mixins, and DRF permission examples. This guidance provides patterns for secure authentication and authorization to prevent unauthorized access in production applications.

Prevent SQL injection and XSS in Django applications by applying secure defaults, auditing views and serializers, and following specific avoidance patterns. This guidance provides actionable configuration recommendations and checklist guidance for vulnerability prevention.

Configure Django CSRF protection and API rate limiting by applying secure middleware patterns and permission examples. This guidance covers CSRF exposure prevention, API hardening, and file upload validation for production-ready applications.

Yes, this guidance supports Django REST Framework permission audits by providing DRF permission examples and API hardening patterns. It is applicable to Django projects preparing for security reviews, permission audits, and production deployments.

You need a Django security audit when preparing for production deployments, security reviews, or permission audits. This guidance helps produce a prioritized list of fixes by auditing settings, authentication, and middleware against production security requirements.