zenticalab-security

What problem does it solve?

Reduces the risk of critical security vulnerabilities in the ZENTICALAB application by providing concrete, mapped, and actionable OWASP Top 10 2025 guidance for both backend and frontend.

Core Features & Use Cases

• OWASP Top 10 2025 mapping for ZENTICALAB: Covers A01–A10 with rules tailored to the platform, including multi-tenant authorization and request handling.
• Backend hardening for .NET: Provides secure patterns for tenant-safe data access, secure headers, injection prevention, crypto/JWT requirements, rate limiting, auth failure handling, and resilient exception behavior.
• Frontend hardening for Angular: Covers XSS-safe rendering practices, token storage guidance (avoid localStorage), and production-oriented content security posture.
• Security logging and pre-merge checklist: Defines what to log, what to alert on, and a pre-PR verification list to enforce consistency.

Quick Start

Ask your team to use zenticalab-security as the security checklist for every PR, specifically validating tenant authorization, injection defenses, secure token handling, and production logging before merge.