Cheatsheets
Practical application security guides and references, organized by category.
Source: OWASP Cheat Sheet Series
Authorization, IDOR, and privilege boundaries.
Secure REST, GraphQL, gRPC, and WebSocket usage.
Threat modeling, attack surface, and secure design.
Account auth, MFA, credential hygiene, and sessions.
Core HTTP and TLS hardening for web apps.
CSP, DOM protections, cookie safety, and XS leaks.
Docker, Kubernetes, serverless, and IaC security.
Defense against CSRF, clickjacking, and redirects.
Crypto storage, key management, secrets, file upload.
SQL/NoSQL, OS command, LDAP, deserialization, and XXE.
Security considerations for microservices architectures.
Dependencies, SBOM, and software supply chain hygiene.
Safe input handling and XSS prevention.