springboot-security - Spring Boot Security Audit
Spring Security best practices for authentication, authorization, input validation, CSRF, secrets, headers, and rate limiting in Spring Boot.
Tags
Updated: 2026-09-18Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Audit authentication and authorization
- Validate user inputs
- Prevent SQL injection vulnerabilities
- Encode user passwords
- Configure CSRF and CORS
- Externalize secret credentials
- Configure security HTTP headers
- Apply endpoint rate limiting
- Scan dependencies for vulnerabilities
Inputs
- Spring Boot codebase
- Application configuration files
- HTTP request DTOs
Outputs
- Security review recommendations
- Secured Spring Security configuration
- Validated Java code snippets
Requirements
- Java
- Spring Boot
- Spring Security