Awesome Reviewers

Verification · Threat modeling

Weakness discovery

For each entry point, searches for the weakness classes that apply to it: injection, broken access control, SSRF, deserialization, path traversal.

Sub-techniques

  • Per-surface weakness search V1060.001

    Apply the weakness classes relevant to each surface category.

  • Multi-tenancy isolation V1060.002

    Check every query and cache key for tenant scoping.

How to build it

  1. Map each surface category to the weakness classes that apply.
  2. Search with taint queries and an investigating agent.
  3. Record each weakness with the entry point it is reachable from.

Signals in a repository

  • Security audit reports or issues labelled security.