Hi all!
Do you have examples of critical/fundamental security patterns that are easy to assess? I'm trying to compile a list because I'm creating a security assessment app for CIS Top 20.
SAST tools are some of the hardest tools to implement. I'm looking to test security patterns that are easy to assess.