Software Securityhome
Fix a findingSearch
Glossary

Security misconfiguration

Insecure settings anywhere in the stack, such as debug modes left on, unnecessary features and endpoints, default accounts, verbose errors or missing hardening. OWASP ranks it A02 in the Top 10:2025.

Covered in

Guide

Ship without debug modes, verbose errors or exposed files

Turn off debug output, publish an allowlisted build and probe each deployment for exposed files and endpoints.

Find your next answer

Type to search. Search runs in your browser.

Searches run in your browser, but the host can infer them from the index files they load. The address shows your search so you can bookmark or share it.