Security Checklist

Comprehensive security checklist based on OWASP Top 10 (2021) and industry best practices.

Quick Reference

• /ai-factory.security-checklist — Full audit checklist
• /ai-factory.security-checklist auth — Authentication & sessions
• /ai-factory.security-checklist injection — SQL/NoSQL/Command injection
• /ai-factory.security-checklist xss — Cross-site scripting
• /ai-factory.security-checklist csrf — Cross-site request forgery
• /ai-factory.security-checklist secrets — Secrets & credentials
• /ai-factory.security-checklist api — API security
• /ai-factory.security-checklist infra — Infrastructure security
• /ai-factory.security-checklist prompt-injection — LLM prompt injection
• /ai-factory.security-checklist race-condition — Race conditions & TOCTOU
• /ai-factory.security-checklist ignore <item> — Ignore a specific check item

Ignored Items (SECURITY.md)