security
Practical resources about security for software engineers.
105 results
Protecting Applications and Data
Security is not a checkbox — it is a mindset. From input validation and XSS prevention to secrets management and compliance frameworks, every layer of the stack needs defensive design.
Browse recipes for implementing Content Security Policy, encrypting data at rest and in transit, managing API keys, and conducting dependency audits. Guides also cover OWASP Top 10 mitigations and secure coding practices by language.
User Access Audit Template
A template for reviewing and certifying user access rights across systems, applications, and data...
Vulnerability Scan Report Template
A template for summarizing vulnerability scan findings, including asset coverage, severity...
API Authentication Design Template
Template for documenting API authentication flows and token lifecycle: auth scheme selection, token...
API Security Review Template
A checklist template for reviewing API authentication, rate limiting, and OWASP compliance.
Data Classification Template
A template for classifying data as public, internal, confidential, or restricted with handling...
Dependency Vulnerability Triage Template
Template for triaging CVEs by severity and impact: vulnerability scoring, exploitability...
Incident Response Playbook Template
A step-by-step playbook template for handling security incidents.
OWASP Top 10 Remediation Checklist
Checklist for tracking OWASP Top 10 vulnerability remediation per application: risk assessment, fix...
Penetration Test Remediation Template
A template for tracking security findings, assigning remediation owners, and validating fixes after...
Secrets Rotation Runbook
Runbook for rotating secrets without downtime: secret inventory, rotation schedule, zero-downtime...
Secrets Rotation Template
A template for scheduling and tracking the rotation of API keys, tokens, and certificates.
Security Audit Checklist Template
A thorough checklist for conducting security audits of applications and infrastructure.
Security Review Checklist for PRs
Checklist for security checks during pull request review: input validation, authentication,...
Vendor Risk Assessment Template
A template for evaluating third-party vendor security and operational risks.
Vulnerability Management Template
A repeatable template for tracking vulnerabilities, assigning remediation owners, defining patching...
Third-Party Dependency Audit Template
A template for auditing third-party dependencies: license compliance, security vulnerabilities,...
Penetration Test Plan Template
Use this penetration test plan template to document findings, risks, reproduction steps, and...
Complete Guide to LLM Security
Secure LLM applications in production. Covers prompt injection, jailbreaks, data leakage, OWASP Top...
Complete Guide to GraphQL Security
Secure GraphQL APIs against introspection leaks, query depth attacks, cost-based DoS, batching...
CI/CD Security: Harden Your Pipelines and Prevent Supply
A practical guide to securing CI/CD pipelines: secrets management, least-privilege runners,...
No results found.