security-review

To check application code for security vulnerabilities, validate secrets management, input validation, parameterized queries, and authentication/authorization. You can run a security review to identify XSS/CSRF protections, rate limiting, and dependency audit risks before they reach production.

When adding authentication and creating API endpoints, run security checks for secrets management, input validation, and parameterized queries. A security review validates authentication/authorization controls, XSS/CSRF protections, rate limiting, and cloud IAM settings to ensure endpoints are secure.

A security review validates cloud infrastructure configurations by checking IAM least-privilege, VPC and firewall settings, and secrets rotation. It also provides CI/CD hardening, WAF and CDN recommendations, and backup/disaster recovery guidance to enforce operational security controls.

Yes, you can use this security review for pull request gating and pre-deployment checklists. It identifies common and advanced vulnerabilities across application code and cloud infrastructure, ensuring regulatory and operational security controls are enforced before deployment.

Yes, this security review covers dependency auditing and SQL injection prevention. It validates parameterized queries to prevent SQL injection and runs dependency audits to detect known vulnerabilities, alongside checks for secrets management, input validation, and rate limiting.

You need to run a security review when handling user input, file uploads, or implementing payments to prevent vulnerabilities. The review validates input validation, authentication/authorization, and logging to ensure sensitive data processing and cloud resources are secured before production.