Vulnerability Classes
Every page here follows the same locked structure: what it is, why the trust that enables it fails, where it actually shows up, how to find it, what it costs a real business, and how it gets fixed. Written for a newcomer and a client-facing security person to read the same page and both get what they need. Pick a surface below to see its full list.
Cloud Security
Public storage exposure, IAM misconfiguration, insecure IaC, and the other failure modes unique to renting infrastructure.
22 pagesWebApp Security
The OWASP Top 10: injection, broken access control, and everything else a browser-facing app can get wrong.
6 pagesMobileApp Security
The OWASP Mobile Top 10: insecure data storage, insecure communication, and what's structurally different about securing an app that ships its own compiled code onto a device the user controls.
6 pagesNetwork Security
Segmentation, access control, wireless, and the building blocks of a network an attacker can't freely move across.
10 pagesAI Security
The OWASP Top 10 for LLM Applications: prompt injection, excessive agency, and the risks specific to AI-powered systems.