Comprehensive security review covering auth, data validation, secrets management, transport security, and error handling.
This audit evaluates security checks across 5 categories: authentication and session management, input validation and data sanitization, secrets and credentials management, transport layer security, and error handling. Designed for vibe-coded projects where security is often an afterthought, it surfaces the vulnerabilities most commonly introduced during rapid AI-assisted development.
34
Total Checks
3
Delivery Formats
5
Categories
9
Versions
Included
Never included
Copy-only: removed the literal check count from the bundle description (counts come live from the catalog, so a hardcoded number goes stale). No pattern content changed, so check results and scores are unchanged.
Picked by pack overlap with this audit.
Data handling assessment across the AI processing pipeline, covering storage, retention, PII protection, and user control over third-party model data sharing.
Safety assessment against prompt injection attacks, identifying vulnerabilities where untrusted user input might cause the AI to ignore instructions or exfiltrate data.
Comprehensive security audit for REST and GraphQL APIs, covering authentication, authorization, input validation, and protection against OWASP API Top 10 threats.
Production-ready authentication assessment covering session management, login flow security, password handling, and OAuth integrations.
Authorization layer assessment covering access control, resource authorization, API permissions, and admin boundary enforcement.