Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production. Use when auditing security, reviewing config management, or analyzing environment variable handling.
1 email curto, só com as skills novas de Segurança. 4 minutos de leitura, sem spam, cancela com 1 clique.
Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.
Ler descrição completaRecolher descrição
Insecure Defaults Detection
Finds fail-open vulnerabilities where apps run insecurely with missing configuration. Distinguishes exploitable defaults from fail-secure patterns that crash safely.
Fail-open (CRITICAL):SECRET = env.get('KEY') or 'default' → App runs with weak secret
Fail-secure (SAFE):SECRET = env['KEY'] → App crashes if missing
When to Use
Security audits of production applications (auth, crypto, API security)
Configuration review of deplo
[Description truncada. Veja o README completo no GitHub.]