Web Security Hardening

Security audit checklist for web applications. Run through each item when reviewing or building web apps.

Audit Workflow

1. Identify the framework (Node.js/Express, Python/Django/Flask, etc.)
2. Review each checklist item below
3. For implementation details, see framework-specific references:
   • Node.js/Express: See references/nodejs.md
   • Python/Django/Flask: See references/python.md
4. For production deployments, see references/production-gcp.md for extended checklist covering:
   • GCP infrastructure (IAM, networking, secrets)
   • CI/CD pipeline security
   • Monitoring & incident response
5. Report findings with severity and remediation steps

Security Checklist