Back
Security Hardening
Secure defaults, secrets, patching, and threat modeling.
Checklist
- Least-privilege IAM and short-lived credentials.
- Dependency scanning and automated patching.
- Secure headers: CSP, HSTS, XFO, XSS-Protection.
Threat modeling
Run lightweight STRIDE reviews for new high-risk features and document assumptions.