Workflows

Security workflows

Start with the job. Each workflow routes you to the guides, labs and projects for your situation, then walks through the steps and the evidence to keep.

Fix a finding

Move from a scanner alert to a tested, durable fix.

90 guides · example: SQL injection → parameterized query → regression test

Secure a feature

Make security part of the implementation, from the first decision.

51 guides · example: File upload → isolated storage → validation checks

Review a design

Trace data, challenge assumptions, and make risk decisions explicit.

44 guides · example: Tenant isolation → trust boundaries → abuse cases

Test an application

Build a focused test plan around trust boundaries and real behavior.

39 guides · example: Object authorization → role matrix → negative tests

Respond to a vulnerability

Understand exposure, contain risk, and verify the recovery.

45 guides · example: Dependency advisory → exposure assessment → verified rollout

Build an AppSec program

Connect ownership, engineering practices, and evidence of improvement.

49 guides · example: Service inventory → risk tiers → minimum security practices