← Back to Projects

Web App Hardening + OWASP Mapping

A web security project showing validation, auth/session hygiene, secure headers, and logging tied to OWASP-style risks and verified with tests.

Current phase: Architecture & Design completed. Implementation in progress.

PlannedWeb SecurityAPI SecurityDetection/IR
Tech
Next.jsAuth PatternsSecure HeadersValidation
Portfolio maturity15%
This reflects how complete the artifact is (writeup + evidence), not skill level.

Highlights

  • Practical hardening checklist: headers, validation, auth/session handling
  • OWASP-style framing without overcomplication
  • Evidence: testing notes, before/after behavior, and security signals

Audience

Coming soon.

Problem / Goal

Coming soon.

Approach

Coming soon.

Threats (What I design against)

  • XSS / injection via unsafe inputs
  • Session/token mishandling
  • Insufficient audit logging

Controls (How I mitigate)

  • Validation + encoding patterns
  • Safer session/token handling
  • Security headers + logging baseline

Evidence

REPORTHardening checklist(Planned)
Evidence links will be added as artifacts are published (screenshots, configs, scan results, writeups).

Next steps

  • Publish a writeup + add screenshots
  • Add a before/after checklist with verification steps