8 resources
Guides
OWASP Top 10 for Modern Applications
Use OWASP guidance to structure web testing around authentication, authorization and business workflows.
Read articleGuides
API Security Best Practices
A practical review of API identity, object authorization, schemas and evidence.
Read articleGuides
Cloud Security Fundamentals
Review identity, exposure and configuration within your cloud responsibilities.
Read articleChecklists
Mobile Application Security Checklist
Prepare an Android or iOS review covering the client, platform and supporting APIs.
Read checklistGuides
Vulnerability Management Basics
Prioritize remediation using exposure, validation and business context.
Read articleTechnical Analysis
An Illustrative Security Assessment Walkthrough
A fictional SaaS example showing scope, evidence and reporting. Not a client case study.
Read articleGuides
How to Scope a Network Security Assessment
Define authorized assets, testing vantage points, safety limits and useful deliverables.
Read articleChecklists
Security Configuration Review Checklist
Prepare a contextual hardening review, from permissions and exposure to evidence and exceptions.
Read checklist