Technique · Threat modeling

Weakness discovery

For each entry point, searches for the weakness classes that apply to it: injection, broken access control, SSRF, deserialization, path traversal.

Sub-techniques

Per-surface weakness search V1060.001

Apply the weakness classes relevant to each surface category.
Multi-tenancy isolation V1060.002

Check every query and cache key for tenant scoping.