leeway-appsec-secure-sdlc

Application security capability across threat modeling, secure design, code review, SAST/DAST, fuzzing, dependency analysis, secrets and remediation verification.

SKILL.md

GitHub

LeeWay AppSec & Secure SDLC

Threat model assets/trust boundaries/abuse cases, then apply appropriate secure coding, review, static/dynamic analysis, fuzzing and dependency/secrets controls. Vulnerability severity combines technical severity with reachability/exploitability/business context. Security tools finding zero issues != absence of vulnerabilities.