Run web security assessments

Execute web security assessment workflow end-to-end

Comprehensive web application penetration testing with structured threat modeling and prioritized exploitation

• · Target URL or domain
• · Assessment scope (reconnaissance, threat model, pentest, fuzzing, OSINT)

• · Application narrative (summary, user flows, tech stack, attack surface)
• · Threat model (prioritized attack scenarios)
• · Pentest findings with PoCs
• · OWASP/CWE mapped report

• · Recon skill (SubdomainEnum, EndpointDiscovery, PortScan)
• · FFUF (fuzzing)
• · Playwright (web app testing)
• · SpiderFoot/Maltego (OSINT)

Explicit written authorization; Recon skill available; target accessible

Assessment scope too broad (unfocused effort); missing threat model guidance; unverified claims in report

• · 6-phase pentest methodology (recon -> mapping -> vulnerability -> exploitation -> reporting)
• · Threat model drives testing (not blind fuzzing)
• · OWASP/CWE mapping for findings