Download

Skill UI

Browse and discover 6252+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search owasp , found 43 results

Default Newest Most Downloaded

API Security Testing with 42Crunch

implementing-api-security-testing-with-42crunch

mukul975/Anthropic-Cybersecurity-Skills

Implement 42Crunch-powered API security testing by auditing OpenAPI specs and running conformance scans, integrating IDE/CI tooling to catch OWASP API Security Top 10 issues before and after deployment.

Apigee API Threat Protection

implementing-api-threat-protection-with-apigee

mukul975/Anthropic-Cybersecurity-Skills

Implement Google Apigee policies such as JSON/XML validation, regex monitoring, SpikeArrest rate limiting, OAuth2 token checks, and API key verification to shield APIs from OWASP API Security Top 10 threats before requests reach backend services.

Cloud WAF Defense Setup

implementing-cloud-waf-rules

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying and tuning AWS, Azure, and Cloudflare WAF rules to block OWASP Top 10 threats, bot and credential stuffing attacks, while logging and analyzing traffic to reduce false positives before enforcement.

Automated DevSecOps Scans

implementing-devsecops-security-scanning

mukul975/Anthropic-Cybersecurity-Skills

Orchestrates SAST, DAST, SCA and secrets detection via Semgrep, OWASP ZAP, Trivy and Gitleaks inside CI/CD pipelines so teams can shift security left, block risky deployments, and satisfy compliance automatically.

Runtime Application Self-Protection

implementing-runtime-application-self-protection

mukul975/Anthropic-Cybersecurity-Skills

Deploy RASP agents inside Java or Python webapps to detect and block OWASP Top 10 attacks, tune policies, and feed telemetry into SIEMs for runtime visibility and compliance readiness.

ModSecurity Logging Implementation

implementing-web-application-logging-with-modsecurity

mukul975/Anthropic-Cybersecurity-Skills

Guide to configure ModSecurity WAF with OWASP CRS, log comprehensive request data, tune rules to suppress false positives, forward audit logs to SIEM, and move to blocking mode for hardened web applications.

Pipeline DAST Integration

integrating-dast-with-owasp-zap-in-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Integrates OWASP ZAP dynamic application security testing into CI/CD pipelines by configuring baseline, full, and API scans, tuning scan policies, interpreting vulnerabilities, and enforcing DAST quality gates in GitHub Actions or GitLab CI before production.

Postman API Security Tests

performing-api-security-testing-with-postman

mukul975/Anthropic-Cybersecurity-Skills

Leverages Postman collections, automated scripts, and Newman/ZAP integrations to exercise OWASP API Security Top 10 vulnerabilities across roles and CI/CD pipelines, ensuring authentication, authorization, injection, and data exposure defenses before deployment.

Threat Modeling with Threat Dragon

performing-threat-modeling-with-owasp-threat-dragon

mukul975/Anthropic-Cybersecurity-Skills

Guide for using OWASP Threat Dragon to build data flow diagrams, map STRIDE/LINDDUN threats, and document mitigations so teams can conduct security design reviews and produce compliance-ready reports.

Web Application Pentest

performing-web-application-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Leverages OWASP WSTG processes and Burp Suite to systematically validate web applications for authentication, authorization, input validation, session, and business-logic flaws ahead of deployment or during compliance checks.

Web Vulnerability Triage

performing-web-application-vulnerability-triage

mukul975/Anthropic-Cybersecurity-Skills

Validate DAST and SAST findings with OWASP risk rating, flag false positives, and prioritize remediation so web application teams focus on the most impactful vulnerabilities.

Secure Api Gateway Waf

securing-api-gateway-with-aws-waf

mukul975/Anthropic-Cybersecurity-Skills

Configures AWS WAF on API Gateway endpoints with managed OWASP rule groups, rate-based throttling, bot control, IP reputation filtering, and monitoring to block web exploits and abusive traffic.

Prev 1 234 Next

Language