Vulnerability
A flaw in design, configuration or code that could let an unauthorised person gain access, change data or disrupt a service.
- 01
Why it matters
Most attacks start not with a new technique but with a known weakness that was never fixed. It can be an old plugin, a wrong setting or a check forgotten in the code. What matters is not how many weaknesses there are, but which ones can really be exploited and what they would cost you. That is why findings are prioritised and their fixes are verified again.
- 02
Example
On an online shop, if a visitor who changes the order number in the address bar can see another customer's name and address, that is an authorisation flaw. The code appears to work, but it never checks whether the order belongs to the person asking for it.
- 03
Common mistake
Looking only at an automated scan report and concluding that there are no critical issues. Scanners find known signatures; they usually miss business logic flaws such as access to someone else's data.
- 04
Let's talk about your project.
Tell us what you need; we will define the scope together.