Skip to main content

How to use the checklist

The interactive checklist is built for the real assessment loop: scope, work through controls, record findings, and confirm nothing was skipped.

The loop​

  1. Pick a platform. Choose Web Application, API, or Mobile. Each platform is organised into categories → technologies → checks. Expand and collapse categories and technologies to navigate; every section shows its item count, and Expand all / Collapse all are one click away.
  2. Jump with search. Press ⌘K / Ctrl+K from any page to search every platform, category, technology, check, tool, and reference. Selecting a result jumps straight to it, expands the right sections, and highlights the item.
  3. Scope & recon first. Start with Information Gathering to map the stack, endpoints, and entry points. What you find tells you which technologies matter.
  4. Filter to your surface. Use the severity and status filters to focus. When time is short, filter to High and Critical first.
  5. Work top to bottom. Expand a check to read what to verify and why, follow the references, then tick it when you've assessed the control (pass or finding).
  6. Take notes as you go. Each item has a notes field — record payloads, request IDs, and evidence. Notes are saved in your browser.
  7. Export your evidence. The Export button produces a Markdown summary of your progress and notes that you can paste into a report or attach to an engagement folder.

What "checked" means​

A checked item means you assessed this control — not necessarily that it passed. Use the notes field to record the outcome. The checklist tracks coverage; your notes track findings.

Privacy​

There is no backend. Progress and notes live in your browser's localStorage and are never transmitted. Clearing site data (or the Reset button) wipes them.

Severity​

Each check carries a typical severity (critical → info) for the control it covers. Treat it as a prioritisation hint, not a verdict — real severity depends on the application's context and the exploitability you demonstrate.