Application Security

Patch & Update Tracker

A living record of known application and dependency vulnerabilities, patch status, and remediation deadlines across owned software.

Secure Coding Checklist

A per-release checklist of secure coding requirements covering input validation, authentication, and safe handling of common vulnerability …

Secure Mobile App Testing Tracker

A record of security test coverage, findings, and remediation status for iOS and Android application releases.

Security Misconfiguration Log

A record of hardening gaps found in application, server, and framework configuration, and their remediation status.

Static Code Analysis Log

A record of SAST findings across the codebase, their severity, and remediation status, tracked per build or commit.

Web Application Vulnerability Tracker

A record of vulnerabilities found through DAST scans and penetration tests against running web applications, and their remediation status.

Application Threat Modeling

A structured record of an application's threat model — trust boundaries, attacker scenarios, and mitigations — reviewed at design time and …

CSRF (Cross-Site Request Forgery)

A web attack technique that hijacks a user's authenticated session to make a target site perform actions the user never intended.

SQL Injection

A classic web application attack technique that manipulates unvalidated user input to execute unintended SQL statements against a database.

XSS (Cross-Site Scripting)

A client-side web vulnerability where an attacker injects a malicious script that executes in the browser of a user who views the page.

API Security (OWASP API Top 10 and BOLA)

Technologies and processes that protect the APIs supporting inter-application interaction from unauthorized access, data leakage, and …

Code Security (SAST, DAST, and Secure Coding)

The practice of analyzing security weaknesses that can arise during software development and applying safe coding standards to build …

DevSecOps Pipeline

A CI/CD pipeline that automates and integrates security activities across the entire software development lifecycle, delivering both speed …

DevSecOps

A culture and methodology that treats security as a shared responsibility by automating and integrating security activities across the …

Software Supply Chain Security (SBOM and SLSA)

The set of activities that manage security threats and ensure trustworthiness across the entire process from software production to …