API Broken Authentication: Common Testing Patterns
API broken authentication appears when an API cannot reliably prove who the caller is or cannot safely manage credentials, tokens, and sessions.
Authentication
JWT Security Testing Checklist
JWTs are compact signed tokens, but implementation mistakes can turn them into authentication and authorization weaknesses.
Password Reset Vulnerabilities: Common Patterns
Password reset is an account recovery feature, but small design flaws can turn it into an account takeover path.
Rate Limiting: The Control That Many Apps Forget
Rate limiting is not only a performance control. It is a security boundary for authentication, abuse prevention, and API resource protection.
Authentication Testing Checklist for Web Applications
Use this checklist to review login, registration, password reset, session management, MFA, and account recovery flows.