Security Audit Checklist

Comprehensive security audit checklist based on CIS and NIST frameworks.

Security Audit Checklist

Assess web application security with OWASP-aligned controls. Click each item to cycle through Pass / Fail / Not Assessed and get a risk report.

HTTPS / TLS encryption enforced everywhere

Transport • Risk weight: 9/9

? N/A

Strong authentication (MFA, password policy)

Access Control • Risk weight: 9/9

? N/A

Input validation on all forms and APIs

Input Handling • Risk weight: 8/9

? N/A

SQL injection prevention (parameterized queries)

Injection • Risk weight: 9/9

? N/A

XSS prevention (output encoding, CSP)

Injection • Risk weight: 8/9

? N/A

CSRF protection on state-changing requests

Session • Risk weight: 7/9

? N/A

Security headers configured (CSP, X-Frame-Options, etc.)

Headers • Risk weight: 6/9

? N/A

Dependencies scanned for known vulnerabilities

Supply Chain • Risk weight: 7/9

? N/A

Rate limiting on authentication and APIs

Availability • Risk weight: 6/9

? N/A

Secrets management (no hardcoded keys)

Configuration • Risk weight: 8/9

? N/A

Security logging and monitoring

Monitoring • Risk weight: 6/9

? N/A

Data encryption at rest

Data Protection • Risk weight: 7/9

? N/A

Principle of least privilege (RBAC)

Access Control • Risk weight: 7/9

? N/A

Backups tested and encrypted

Resilience • Risk weight: 6/9

? N/A

Tool Information

Related Tools You Might Like

🔗

GDPR Compliance Checker

Kontrollera GDPR efterlevnadskrav

🔗

Integritetspolicy Generator

Generera sekretesspolicymallar

🔗

Villkor för Service Generator

Generera ToS-mallar

🔗

Cookie Consent Generator

Generera cookie samtycke text

🔗

Data Retention Calculator

Beräkna datalagringsperioder

🔗

Kontrakt mall Generator

Generera grundläggande kontraktsmallar

🔗

Surfboard volymkalkylator

Beräkna den perfekta surfbrädan volym baserat på din vikt, erfarenhet nivå och våg förhållanden.

🔗

Wave Height Converter

Konvertera mellan olika våghöjdmätningar (ansiktshöjd, Hawaiianska skala, havet svullna).

🔗

Scuba Dive Planner

Planera ditt dyk med djupgränser, bottentid och säkerhetsdekompressionskrav.

Security Audit Checklist