Sana Okafor
sanako
Security review, threat models, and dependency hygiene.
6 skills10 saves
Rate Limit Plan
sanako/rate-limit-plan
Decide what to limit, by what key, and what a legitimate burst looks like before it's throttled.
sanako/rate-limit-planDecide what to limit, by what key, and what a legitimate burst looks like before it's throttled.
Input Validation
sanako/input-validation
Trace untrusted input to where it's used and check the boundary that should have stopped it.
sanako/input-validationTrace untrusted input to where it's used and check the boundary that should have stopped it.
Threat Model
sanako/threat-model
Draft a threat model for a feature: what an attacker wants, and the cheapest way they get it.
sanako/threat-modelDraft a threat model for a feature: what an attacker wants, and the cheapest way they get it.
Authorization Review
sanako/authz-review
Check every mutation for a server-side ownership check, not just a hidden button.
sanako/authz-reviewCheck every mutation for a server-side ownership check, not just a hidden button.
Secret Sweep
sanako/secret-sweep
Find credentials in source, history, logs and error messages, and say how to rotate each.
sanako/secret-sweepFind credentials in source, history, logs and error messages, and say how to rotate each.
Dependency Triage
sanako/dependency-triage
Read an advisory list and separate what's exploitable in this codebase from what isn't.
sanako/dependency-triageRead an advisory list and separate what's exploitable in this codebase from what isn't.