Security Patterns

OWASP Top 10 (2021) Checklist

#	Vulnerability	Prevention
A01	Broken Access Control	RBAC, resource-level auth, CORS
A02	Cryptographic Failures	Encrypt at rest/transit, no PII in logs
A03	Injection (SQL/NoSQL/XSS/OS)	Parameterized queries, output encoding, CSP
A04	Insecure Design	Threat modeling, secure design patterns
A05	Security Misconfiguration	Hardened defaults, no debug in prod
A06	Vulnerable Components	npm audit, dependency scan, CVE tracking
A07	Auth Failures	Rate limiting, MFA, secure session
A08	Data Integrity Failures	Input validation, signed updates, CI/CD security
A09	Logging & Monitoring Failures	Audit log, alert on anomaly
A10	SSRF	URL allowlist, network segmentation