testing-application-security

Applies OWASP-informed security testing within a tester scope: an authorization gate before any probing, role and permission matrices, broken access control and IDOR checks (one user seeing the data of another by changing an ID in the URL), input validation and injection observation, session and auth behaviour, and safe reporting of findings. Use when testing auth-protected features, when a security review needs QA coverage, when an exploratory session surfaced something security-shaped, or when access control needs a systematic check rather than a spot check.