owasp-checklist

What problem does it solve?

It helps you systematically identify common security weaknesses in a web application or API, turning vague concerns into a concrete, reviewable checklist.

Core Features & Use Cases

• OWASP Top 10 coverage (2021): A category-by-category checklist spanning injection, broken auth, XSS, SSRF, misconfiguration, and more.
• Practical verification prompts: Each control is phrased as a check item you can apply during code review or an architecture audit.
• Use Case: Review a new Cartola manager module by validating authZ/authN flows, query parameterization, XSS defenses, cookie/session hardening, rate limiting, and logging expectations before release.

Quick Start

Use the checklist to review your application routes, request validation, database queries, output encoding, security headers, session/cookie settings, rate limiting, and logging against OWASP Top 10 2021, then mark each item as pass or fail.