Security Hardening Checklist

To perform a comprehensive security audit and generate hardening recommendations, follow these steps systematically.

Step 1: Project Discovery

Identify the project structure and tech stack:

1. Use Glob to find key files:

   • package.json - Dependencies and scripts
   • next.config.* - Next.js configuration
   • middleware.ts - Middleware setup
   • app/**/*.{ts,tsx} - Application routes
   • .env.example - Environment variables

2. Identify authentication provider (Supabase, NextAuth, Clerk, etc.)

3. Identify database type (PostgreSQL, MySQL, MongoDB, etc.)

4. Check for security libraries (helmet, rate-limit, etc.)