OWASP Top 10 2025 Security Audit

Goal

Systematic codebase audit against the OWASP Top 10 2025 framework. Produces a structured severity-rated report with evidence-backed findings. Emphasizes semantic code understanding over regex pattern matching — grep patterns are starting points, real analysis happens by reading and reasoning about code context.

When to use

• "Run an OWASP audit on this codebase"
• "Check for OWASP Top 10 vulnerabilities"
• "Security audit against OWASP 2025"
• "Audit A01 and A03 only"
• "Check this repo for common vulnerabilities"
• "OWASP security review"

When not to use