security-auditor

To perform an OWASP Top 10 security audit, review endpoints and authentication logic against common vulnerability patterns to identify risks like injection and misconfiguration, then generate a prioritized report with actionable fixes.

Preventing SQL injection and XSS requires implementing strict input validation and applying defensive security headers like CSP. Reviewing code for unsafe data handling patterns helps identify and patch these injection vulnerabilities early.

Securing JWT authentication involves checking for weak token handling practices and unsafe secret management. Audit your authorization design to validate safe session handling and implement guardrails for sensitive data.

Yes, you can use security review guidance to fix CORS and CSP misconfigurations. It analyzes your defensive configurations and provides concrete implementation steps to harden secure headers and reduce breach risk.

A code-level security audit focuses on identifying implementation flaws and hardening secure coding practices within the provided codebase, but may not detect external infrastructure vulnerabilities or complex network-level threats.