Security

Standards

• ISO 27001
• ISO 27001-2022

Reference

• The SaaS CTO Security Checklist Redux

Web (http)

CSP

• Mozilla: Content Security Policy (CSP)
• OWASP: Content Security Policy Cheat Sheet
• OWASP: How to do Content Security Policy (PDF)

(Tested by Wapiti).

Secure headers

• Netsparker: HTTP Security Headers: An Easy Way to Harden Your Web Applications
• KeyCDN: Hardening Your HTTP Security Headers
• OWASP: HTTP SECURITY HEADERS (Protection For Browsers) (PDF)

(Tested by Wapiti).

More

• https://kenkantzer.com/learnings-from-5-years-of-tech-startup-code-audits/

Page last modified: 2024-08-07 14:31:22