Skip to content
Eddie Mwangi

Formal assessments

Complete reports are kept separate from the short case summaries. PDF reports open directly in the browser's native PDF viewer so the full document can use the available screen space.

vAPI — Full OWASP API Top 10 Security Assessment

Full technical assessment of the self-hosted vAPI training application covering all ten OWASP API Top 10 (2019) categories plus JWT, SSRF, and XSS Arena challenges.

3 critical9 high1 medium0 low
Read full report →

crAPI Vulnerability Assessment

A security assessment of the crAPI application covering identified vulnerabilities, exploitation paths, security impact, and recommended remediation.

Read full report →

VulnBank — Penetration Testing Report

Full penetration-testing report covering vulnbank.org, the VulnBank Android application, and the VulnBank GitHub repository.

Read full report →