checklist-security

What problem does it solve?

This security verification checklist provides a structured, role-aware process to verify authentication, authorization, data protection, and related controls before changes are released.

Core Features & Use Cases

• Structured checks covering authentication, authorization, input validation, API security, secrets management, and logging to prevent common vulnerabilities.
• Role-based applicability allowing reviewers to tailor checks to different change types (auth changes, data processing, API integrations, payments, and data handling).
• Use Case: Before deploying a new API endpoint or changing access controls, run the checklist to ensure all security controls are implemented and verifiable.

Quick Start

Review the authentication, authorization, and data protection controls in this checklist and tailor it to your project before deployment.