Security
I test your systems and put what I find in a report. Then I help close the gaps I found.
- CriticalOther customers' invoices are readable
- HighSession stays valid after logout
- HighPassword reset link never expires
- MediumNo limit on login attempts
- LowServer version exposed in headers