Detect logging security vulnerabilities

Detect security-relevant logging gaps and credential leaks

Auditing authentication/authorization event logs and preventing credential exposure before code review

• · source code with logging statements
• · error handlers

• · identified vulnerable logging patterns
• · remediation checklist

• · code contains security event logging or authentication handling

• · false negatives if logs are conditional/scattered
• · misses custom logger implementations

• · OWASP A09:2025 standard
• · CWE-117/223/532 references