Spot security vulnerabilities in code

Apply security awareness checklist during code review and implementation

Catching common OWASP vulnerabilities (injection, weak auth, hardcoded secrets, XSS) in code review without requiring a full security audit.

• · Code or codebase to review

• · Vulnerability checklist results
• · Findings flagged by category (input, auth, secrets, exposure)

• · Read
• · Grep
• · Glob

• · Code or files accessible for review
• · OWASP reference available

• · Code not readable
• · Complex vulnerability patterns missed
• · False positives on secure patterns

• · Checklist structured by category (input, auth, data, secrets)
• · OWASP reference cross-linked
• · Tool scope limited to static patterns