Database

Authorization testing, privilege escalation, and IDOR detection for authorized security assessments

API auth flows, rate limiting, schema validation, and GraphQL security testing for authorized assessments

Authentication review, credential handling, and session management testing for authorized assessments

Business logic flaw detection, race conditions, and workflow bypass testing for authorized assessments

XSS, SQLi, command injection, and template injection testing for authorized security assessments

Security headers, CORS, CSP, cookie flags, and TLS configuration review for authorized assessments