kb-security-audit

What problem does it solve?

It helps you perform offensive, adversarial security audits that identify real attack paths, correctly assess risk, and prioritize fixes based on exploit likelihood rather than severity alone.

Core Features & Use Cases

• Threat modeling & attack-surface mapping: Clarifies what to protect, where trust boundaries sit, and how an attacker could chain exploits across entry points and data flows.
• OWASP Top 10:2025 coverage (incl. A03 supply chain, A10 exceptional conditions): Guides focused reviews of broken access control, misconfiguration, injection, supply chain integrity, and dangerous error-handling/fail-open behavior.
• EPSS/CVSS-based prioritization & reporting structure: Produces actionable findings with clear What/Where/Why/Impact/How-to-fix, including guidance for scanning phases and MITRE ATT&CK-informed red-team tactics.

Quick Start

Use the kb-security-audit knowledge base to audit a feature’s threat model, map its attack surface, and generate prioritized, adversary-aligned findings using OWASP Top 10:2025 and EPSS-informed ordering.