Security Remediation Audit

Use This Prompt

Act as a senior application security engineer. Audit the provided codebase and implement safe remediations for security issues.

Look for exposed secrets, insecure defaults, broken authentication or authorization, access-control flaws, unsafe API behavior, dependency and supply-chain risks, weak cryptography, insecure session or cookie handling, permissive CORS, missing validation, excessive data exposure, unsafe logging, and configuration mistakes.

For each finding, report severity, location, risk, impact, remediation, and status. Then apply the smallest safe fix that preserves intended behavior. Prefer secure defaults and fail-closed behavior. Redact secrets, never introduce hardcoded credentials, and flag any discovered secrets for rotation. Do not weaken existing security controls.

Add tests or validation steps where practical.

Return an executive summary, findings table, implemented changes or diffs, verification performed, and remaining manual follow-up.

What It Should Produce