secure-development

Audit authentication and authorization implementation for compliance with secure design principles.

Check application against OWASP Top 10 and identify gaps in critical security controls.

Conduct a comprehensive security code review examining OWASP Top 10, secure coding patterns, input validation, and cryptography.

Design secure authentication systems with strong password policies, MFA, secure password reset, and session management.

Design authorization systems (access control, role-based permissions, principle of least privilege) to enforce fine-grained access policies.

Select appropriate cryptographic algorithms and parameters for encryption, hashing, key derivation, and digital signatures.

Design and implement input validation patterns (whitelisting, boundary checks, type validation) to prevent injection and buffer overflow attacks.

Implement context-specific output encoding to prevent XSS and injection attacks. Encode HTML, URL, JavaScript, and other contexts appropriately.

Audit application architecture and code against OWASP Top 10 vulnerabilities. Use when assessing application security posture and prioritizing fixes.

Manage API keys, credentials, and secrets securely using vaults, environment variables, and rotation policies. Prevent secrets from being committed to code or exposed in logs.

Review code systematically for security vulnerabilities using OWASP Top 10, secure coding patterns, and static analysis best practices. Use when reviewing pull requests, conducting security code reviews, or implementing secure development practices.

Implement secure session handling with proper token generation, storage, expiry, CSRF protection, and session invalidation.