OWASP Top 10 2021
For the &quot;broken access controls&quot;, &quot;cryptographic failures&quot;, and &quot;bad design&quot; categories, I&#x27;ve been working on an open source project to help mitigate those.<p>It&#x27;s still early and I haven&#x27;t released it yet, but I have the docs[0] deployed now. If anybody feels like helping us test this early, I&#x27;d love some feedback. We&#x27;re going to be pushing the code live in a week or so. (It&#x27;s been a lot of building for a while now)<p>I&#x27;ve been thinking about these problems for a while now (as a security engineer) and it&#x27;s cool to see that my intuition is roughly in line with what OWASP is seeing these days. It&#x27;s always hard to know if the problems you see people struggling with are representative of the industry as a whole, or if you&#x27;re just in tunnel vision.<p>Note: We&#x27;re building this as a company so that we can actually afford to continue doing this full time. I&#x27;m still learning how to find the line between open source and a viable business model. Any thoughts would be appreciated[1]!<p>0: <a href="https:&#x2F;&#x2F;www.lunasec.io&#x2F;docs&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.lunasec.io&#x2F;docs&#x2F;</a><p>1: email me at, free at lunasec dot io