Fixing IDOR without breaking your API
Insecure direct object references are the most common high-severity finding we report. The usual fix — swapping IDs for UUIDs — does not actually fix it.
2 min readInsecure direct object references are the most common high-severity finding we report. The usual fix — swapping IDs for UUIDs — does not actually fix it.
2 min readCluster-admin bindings, wildcard verbs, secret-reading service accounts, and the escalate verb. All four are cheap to fix.
1 min readWe reply to every assessment request within one business day.