'vulnerabilities' 검색 결과

Run security tests for web apps, APIs, and source code on Strix Cloud without local Docker or an LLM key. Register targets, review findings in a team dashboard, export results, and configure recurring scans or PR reviews.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Running security tests without local Docker
• Tracking vulnerability status across a team
• Scheduling scans and starting PR security reviews

Test REST, GraphQL, and gRPC APIs with Strix using schemas, credentials, and example data. Investigate authorization flaws, excessive data exposure, and other API risks, then verify findings with requests that reproduce the issue.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Testing an API from its specification
• Checking data access across tenants
• Verifying restrictions on administrator routes

Assess an application against OWASP Top 10:2025 risk categories using Strix. Get findings backed by working exploit examples, organized by category, with clear explanations of what was tested and what remains unassessed.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assessing an app against OWASP Top 10:2025
• Testing access controls across users and tenants
• Organizing proven vulnerabilities by risk category

Plan and coordinate an authorized security assessment across reconnaissance, access testing, privilege escalation, and reporting. Route work to specialist skills, review each stage, and adjust the assessment path within the agreed scope.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning an authorized penetration test
• Coordinating specialist assessment skills
• Evaluating the impact of linked vulnerabilities

Understand a codebase before searching for bugs or vulnerabilities. This skill examines functions line by line, documents assumptions and state changes, and traces calls across modules to build an evidence-based picture of system behavior.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Understanding a codebase before a security audit
• Tracing data and state changes across function calls
• Documenting assumptions for an architecture review

Implement and review API security within an application's existing authentication and data model. Covers token verification, resource permissions, input validation, request limits, secrets, and logging, with concrete checks for unauthorized access and invalid requests.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Add authentication and permissions to an API endpoint
• Check access across users and tenant organizations
• Validate request inputs and reject extra fields

Review GitHub Actions workflows that run AI agents, tracing how external input reaches prompts and tools. Produce findings with evidence, severity, impact, and remediation guidance through static analysis, which examines configuration without running attacks.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing AI agent integrations in GitHub Actions
• Tracing issue and PR text into agent prompts
• Reviewing sandbox settings and tool permissions

Review Git changes with the ocr command-line tool and a configured AI model. Get line-level findings grouped by severity for working changes, commits, or branch comparisons, with code fixes applied when explicitly requested.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing changes before a commit
• Checking a pull request or branch comparison
• Inspecting a specific commit for issues

Assess security in authorized cloud, container, and Kubernetes environments. Review excessive permissions, exposed resources, container isolation, and cluster access controls, then document findings with reproduction details and their impact.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing cloud permissions and public storage settings
• Assessing container isolation and escape paths
• Checking Kubernetes permissions and Secrets handling

Assess industrial control systems by mapping devices, network zones, and exposed protocols. The workflow prioritizes observing traffic and read-only checks, then organizes evidence about configuration weaknesses, firmware vulnerabilities, and potential effects on physical processes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Map industrial devices and network zones
• Inspect captured industrial protocol traffic
• Review control system configurations offline

Coordinate authorized penetration testing with tools for port discovery, vulnerability scanning, web testing, and password hash recovery. Use MCP servers to connect agents to security tools, record reproducible evidence, and support reporting within the approved scope.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Identifying open ports, services, and subdomains
• Scanning authorized targets for known vulnerabilities
• Validating web application security findings

Plan and carry out major library and framework upgrades by checking compatibility, identifying changes that require code updates, testing each stage, and preparing rollback steps if an upgrade causes problems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Planning a major framework upgrade
• Updating dependencies with known vulnerabilities
• Resolving conflicting package versions

Review AI prompts for harmful output risks, bias, privacy concerns, security weaknesses, and clarity. Receive an assessment, a revised prompt, and suggested tests with explanations of the principles behind each improvement.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review a prompt before putting it into use
• Check wording for stereotypes and bias
• Assess data exposure and prompt injection risks

Assess whether a container can escape its isolation and reach the host during an authorized security test. Review privileges, shared mounts, Docker socket exposure, and runC vulnerabilities, then document demonstrated impact and remediation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Testing container escape within an approved scope
• Assessing the impact of privileged or hostPath workloads
• Validating controls that block container escape

Assess serverless functions, primarily AWS Lambda, for unsafe execution of external input and unauthorized changes to code or added libraries. Combine source inspection, activity logs, and permission reviews to identify injection risks and recommend detection and prevention measures.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing Lambda event handlers for injection vulnerabilities
• Investigating unauthorized function or layer changes
• Checking privilege escalation through Lambda execution roles

Assess authorized networks through host discovery, service checks, vulnerability identification, and controlled exploitation. Follow a structured testing process to document attack paths, demonstrate business impact, clean up test artifacts, and prioritize remediation.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Assessing internal or external network security
• Validating firewall rules and network segmentation
• Verifying whether service vulnerabilities are exploitable

Configure TLS 1.3, a protocol for encrypted connections, on nginx, Apache, and Python applications. Select encryption settings and key exchange groups, disable outdated protocols, and use openssl s_client and testssl.sh to check connections and configuration weaknesses.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Enabling TLS 1.3 on nginx or Apache
• Configuring encrypted connections in a Python application
• Disabling outdated TLS versions and weak encryption

Strengthen LDAP and Active Directory services by reviewing encrypted connections, signing, channel binding, access controls, and audit logging. Use the guidance to organize security settings, validate them in a test environment, and document implementation evidence.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Reviewing LDAP or Active Directory security settings
• Organizing encrypted connections and authentication protections
• Checking audit logging and monitoring arrangements

Build a recurring vulnerability scanning process with Nessus, Qualys, or OpenVAS. Prioritize findings using asset importance and known exploitation, then organize remediation deadlines, monitoring dashboards, and automatic tickets for urgent issues.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Establish recurring infrastructure vulnerability scans
• Prioritize fixes using asset importance and exploitation data
• Track remediation deadlines and overdue findings

Review codebases, APIs, and tools for vulnerabilities using source evidence and bounded local checks. Produces supported findings with impact, priority, and focused fixes, and can create structured reports for explicitly requested full audits.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Review security concerns in specific code
• Investigate a suspected vulnerability
• Audit a codebase and produce reports

Audit dependency files across eight language ecosystems for built-in vulnerability patterns, license conflicts, and indirect dependency risks. Generate a prioritized upgrade plan with testing and rollback notes, and pair results with live audit tools for current vulnerability coverage.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing third-party packages before a release
• Checking dependencies against built-in CVE patterns
• Reviewing license conflicts across dependency chains

Assess security risks in AI systems by scanning prompts for known attack patterns and scoring data exposure, poisoning, and tool abuse risks. Map findings to MITRE ATLAS, an AI threat framework, and identify protective controls.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Scan application prompts for injection and jailbreak patterns
• Review malicious instructions in retrieved documents
• Assess training data exposure and poisoning risks

Review code changes for newly introduced security issues with a plausible attack path. Produce findings for the Warden security summary, including affected lines, severity, a minimal fix, and observable conditions for confirming the issue is resolved.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking a PR for newly introduced vulnerabilities
• Reviewing CI changes that expose secrets or write access
• Inspecting Electron changes for unsafe permissions

Strengthen existing tests with fast-check by checking properties across generated inputs. Find bugs that example tests miss and reduce failing inputs to small, reproducible cases. Property testing is available; the other listed workflows remain planned.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking parser behavior across generated inputs
• Testing serialization and deserialization round trips
• Finding pure functions covered only by example tests