Skill UI

A comprehensive guide for performing systematic security assessments on web applications. Following the OWASP Web Security Testing Guide (WSTG), this process identifies critical vulnerabilities such as broken authentication, authorization flaws (IDOR), SQL injection, and Cross-Site Scripting (XSS). The workflow covers reconnaissance, mapping, and advanced testing techniques using tools like Burp Suite and sqlmap, ensuring deep coverage beyond automated scanner capabilities. Ideal for pre-production security validation and compliance audits.

A comprehensive security script designed to test REST API authentication mechanisms for common vulnerabilities. It assesses broken token validation, missing authentication on critical endpoints, weak password policies, and session management flaws. The tool specifically evaluates JWT implementation, API key handling, and adherence to OWASP API Security Top 10, helping identify authentication bypasses before production deployment.

A comprehensive guide for deploying BambooHR integrations to a production environment. This checklist covers all critical stages, including pre-deployment authentication checks, API request quality assurance, data integrity validation, security compliance (PII redaction, webhook verification), robust monitoring setup, and detailed rollback procedures. It ensures a smooth and reliable go-live process.

A comprehensive, multi-phase checklist for deploying and validating CAST AI cost optimization and autoscaling features on a production Kubernetes cluster. It guides users through prerequisites, initial monitoring setup (Phase 1), full autoscaling enablement (Phase 2), security hardening (RBAC, secrets), and critical validation commands for safe go-live deployment.