security-review-owasp-credential-stuffing-prevention

What problem does it solve?

This Skill helps reviewers find weaknesses that let attackers reuse stolen passwords at scale, especially where login systems lack layered friction, detection, or adaptive controls.

Core Features & Use Cases

• Authentication Defense Review: Assess MFA coverage, step-up checks, and recovery paths that should resist hostile login attempts.
• Abuse Control Analysis: Evaluate rate limiting, proxy handling, device intelligence, and distributed attack resistance.
• Detection and Response Review: Check telemetry, alerts, notifications, and operational playbooks for stuffing spikes and suspicious access.
• Use Case: Review a sign-in flow, password reset flow, or privileged account path to confirm whether credential stuffing is meaningfully constrained and observed.

Quick Start

Use this skill to review the authentication flow in the attached codebase for credential stuffing defenses and report any confirmed gaps.