security-squad

Finds the way in before anyone else does.

• anvilhub-penetration-testersonnet

  Authorized security testing of web applications and APIs — authentication, authorization, injection, business logic, and server configuration. Use for security assessments, vulnerability hunting, and validating that a reported flaw is real.

• anvilhub-security-reviewersonnet

  Reviews code and designs for security defects across the stack — injection, broken access control, XSS, SSRF, insecure deserialization and the rest of the OWASP Top 10. Use for security review of a change, auditing a component, or assessing whether a design has a hole in it.

• anvilhub-vulnerability-analystsonnet

  Vulnerability assessment and triage — scanning, CVE analysis, dependency risk, container and infrastructure hardening, and deciding what actually needs fixing first. Use for scan output triage, patch prioritization, and supply-chain risk.

• anvilhub-appsec-architectsonnet

  Designs authentication, authorization, credential storage, session management, PKI and cryptography for applications. Use for auth flow design, password and key storage decisions, token strategy, certificate architecture, and reviewing whether a security design holds.