security
Practical resources about security for software engineers.
109 results
Protecting Applications and Data
Security is not a checkbox — it is a mindset. From input validation and XSS prevention to secrets management and compliance frameworks, every layer of the stack needs defensive design.
Browse recipes for implementing Content Security Policy, encrypting data at rest and in transit, managing API keys, and conducting dependency audits. Guides also cover OWASP Top 10 mitigations and secure coding practices by language.
User Access Audit Template
A template for reviewing and certifying user access rights across systems, applications, and data...
Vulnerability Scan Report Template
A template for summarizing vulnerability scan findings, including asset coverage, severity...
Access Control Policy Template
A template for defining authentication, authorization, RBAC, ABAC, MFA, password policies, session...
API Authentication Design Template
Template for documenting API authentication: scheme selection, token lifecycle, JWT config, OAuth2...
API Security Review Template (OWASP Checklist)
A fillable checklist template for reviewing API authentication, authorization, rate limiting, and...
Data Classification Template
Copy-ready data classification policy template: 4 levels, per-level handling rules, dataset...
Dependency Vulnerability Triage Template
Process for deciding what to do when a scanner flags a CVE in a dependency: intake, exploitability...
Encryption Key Lifecycle Template
A template for managing the creation, distribution, rotation, and destruction of encryption keys...
Encryption Key Rotation: Runbook
Use this encryption key rotation runbook to rotate keys with zero downtime. Covers schedules,...
Incident Response Playbook Template
A step-by-step playbook template for handling security incidents.
OWASP Top 10 Remediation Checklist
Checklist for tracking OWASP Top 10 vulnerability remediation per application: risk assessment, fix...
Penetration Test Remediation Template
A template for tracking security findings, assigning remediation owners, and validating fixes after...
Secrets Rotation Runbook
Runbook for rotating secrets without downtime: secret inventory, dual-key rotation, AWS Secrets...
Secrets Rotation Template
A template for scheduling and tracking the rotation of API keys, tokens, and certificates.
Security Audit Checklist Template
A thorough checklist for conducting security audits of applications and infrastructure.
Security Incident Response Template
A template for security incident response covering detection, classification, containment,...
Security Review Checklist for PRs
Checklist for security checks during pull request review: input validation, authentication,...
Vendor Risk Assessment Template
A template for evaluating third-party vendor security and operational risks.
Vulnerability Management Template
A repeatable template for tracking vulnerabilities, assigning remediation owners, defining patching...
Third-Party Dependency Audit Template
A template for auditing third-party dependencies: license compliance, security vulnerabilities,...
No results found.