• A1 Injection
  • A2 XSS
  • A3 Broken Auth
  • A4 Insecure DOA
  • A5 CSRF
  • A6 Security Misconfiguration
  • A7 Crypto
  • A8 URL Access
  • A9 SSL/TLS
  • A10 Redirects
  • Extras
    • Guard
    • Session Secret
    • DB Sessions