The Perimeter
The edge of your app, where the whole internet knocks.
CORS
The asterisk that lets everyone in.
0/2 scenarios fixedUnlock this door
SSRF
If your server fetches user URLs, it works for strangers.
0/2 scenarios fixedUnlock this door
Open redirects
Your domain should not launder someone else's trap.
0/1 scenarios fixedUnlock this door
Missing headers
The free defenses you forgot to turn on.
0/2 scenarios fixedUnlock this door