348건 · 관련도순
Review source code, dependencies, and infrastructure settings for security issues. Find exposed credentials, unsafe input handling, and access control gaps, then organize findings into a report with severity levels, affected locations, and recommended fixes.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Scan code for security risks such as injection attacks and embedded secrets, then report findings by severity. Also check whether design documents record security decisions, trust boundaries, and accepted risks.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Guides security scanning across networks, web applications, wireless systems, and cloud environments. Helps select and configure tools, check findings for false positives, prioritize risks, and prepare reports with remediation recommendations.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Test web applications for HTML injection, where user input becomes page markup. Identify affected inputs, verify stored or reflected behavior, assess visual manipulation and phishing risks, and document findings with remediation guidance.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Assess web applications for path traversal, a flaw that exposes files outside intended folders. Follow structured checks to identify vulnerable inputs, document demonstrated access, assess data exposure, and prepare remediation guidance.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Dedicated security-audit route for OWASP-style risks, secret leaks, auth flaws, injection, unsafe input handling, SSRF/XSS, and sensitive-data exposure. Use instead of code-reviewer when the prompt explicitly asks for security, vulnerability, threat, auth, or OWASP review.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Security-review a diff against the OWASP Top 10. Use before merging anything that touches auth, input handling, queries, or external calls.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OWASP Top 10 audit checklists for Web Applications (2021), APIs (2023), and Mobile (2024). Use when performing any security review, PR review, or codebase audit touching web, mobile, or API code.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
LLM and AI application security testing — prompt injection, jailbreak resistance, OWASP LLM Top 10 (2025), RAG and agent/tool-use security, model supply chain, and AI red teaming for authorized assessments
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
OWASP Top 10 testing, injection vulnerability detection, API security assessment, authentication testing, and web vulnerability reporting for authorized assessments
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Security patterns and OWASP guidelines. Triggers on: security review, OWASP, XSS, SQL injection, CSRF, authentication, authorization, secrets management, input validation, secure coding.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Perform black-box / grey-box web application penetration testing on an authorized target — auth bypass, IDOR, session handling, business-logic flaws, parameter tampering, Burp Suite / OWASP ZAP workflows. Use when the user mentions 'web pentest,' 'web application penetration test,' 'pentesting,' 'bug bounty,' 'Burp Suite,' 'ZAP,' 'OWASP testing,' 'authentication testing,' 'session testing,' 'authorization testing,' 'business logic testing,' 'web vulnerability testing,' or has explicit authorization to test a live web application.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Security audit, hardening, threat modeling (STRIDE/PASTA), Red/Blue Team, OWASP checks, code review, incident response, and infrastructure security for any project.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Comprehensive security auditing framework for LLM applications covering OWASP Top 10 for LLMs, threat modeling, penetration testing, and compliance with NIST AI RMF and ISO 42001Use when "security audit, llm pentest, ai security assessment, compliance audit, vulnerability assessment, security, audit, compliance, penetration-testing, owasp, llm" mentioned.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Security engineering that protects applications, data, and users from real-world threatsUse when "security, authentication, authorization, encryption, OWASP, vulnerability, XSS, SQL injection, CSRF, secrets, password, JWT, OAuth, permissions, audit, compliance, security, authentication, authorization, encryption, vulnerabilities, OWASP, compliance, audit" mentioned.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
EXPERIMENTAL. Use when code needs a security review against the OWASP Top 10:2025 — access control, misconfiguration, supply chain, cryptography, injection, insecure design, authentication, integrity, logging and alerting, and mishandled exceptional conditions. Not for penetration testing a running system, not for infrastructure-only scanning, and not for fixing what it finds.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Web 漏洞检测时使用。适用于 OWASP Top 10 检测 / XSS / SQLi / SSRF / CSRF。融合 OWASP Testing Guide + Burp Suite + ZAP。
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.