Hardening baselines & remediation

When it applies

You need the defensive counterpart: how to fix a class of bug, or how to configure a system so the class can't occur. Pairs with every offensive skill's "why it works".

Why it works

Most vuln classes have a small set of correct, well-known mitigations. Applying the right control at the right layer (input handling, authz at the data layer, safe defaults) removes the class, not just the instance.