GUIDES
Security testing guides
Practical, hands-on walkthroughs for testing the security of your own APIs and apps — the same OWASP-aligned methodology the Sentinel Board toolkit automates. Free to read, no sign-up. Every guide covers authorized testing of systems you own or have written permission to test.
API security testing checklist
The OWASP-aligned checks that find real bugs — broken access control, injection, authentication, headers, CORS, and TLS — with example requests to run against your own API.
Read the guide →How to test a Flutter app for security vulnerabilities
A pre-release walkthrough for Flutter apps: secret storage, certificate pinning, release build hardening, reading your own binary, and testing the backend that really matters.
Read the guide →HTTP security headers, explained
What each header does — HSTS, CSP, X-Frame-Options, and the rest — how to test what you send today, and a copy-paste starting configuration you can adapt.
Read the guide →