Awesome Reviewers

Verification · Threat modeling

Mitigation mapping

Checks whether each weakness is already mitigated by a control (validation, authorization middleware, rate limits) before reporting it.

Sub-techniques

  • Control inventory V1061.001

    List the security controls and where they apply.

  • Coverage check V1061.002

    Report entry points that bypass the controls.

How to build it

  1. List controls as code locations (middleware, decorators, gateways).
  2. Check each entry point passes through them.
  3. Report only unmitigated weaknesses.

Signals in a repository

  • Auth middleware, rate limiter and validation layers in the code.