Application Security Testing

---
name: application-security-testing
description: "Use when testing application security."
version: 1.0.0
author: Hermes Agent
license: MIT
platforms: [linux, macos, windows]
metadata:
  hermes:
    tags: [cybersecurity, appsec, owasp, vulnerability-testing]
    related_skills: ['webapp-testing']
---

## Overview
Test web applications for security vulnerabilities using automated and manual techniques.

## When to Use
- "Application Security Testing design and architecture"
- "Best practices for Application Security Testing"
- "Application Security Testing implementation and deployment"
- "Application Security Testing optimization and monitoring"
- "Application Security Testing troubleshooting and scaling"

## Key Concepts
1. Foundational concepts
2. Implementation approaches
3. Testing and validation

## Implementation Patterns
1. Define clear requirements and specifications
2. Choose appropriate tools and frameworks
3. Implement with modular, maintainable code
4. Write tests and automate verification
5. Document architecture and decisions
6. Monitor performance and iterate

## Common Pitfalls
1. **Not accounting for constraints** — resource or timeline limitations
2. **Ignoring industry standards** — not following established best practices
3. **Poor stakeholder alignment** — conflicting requirements
4. **Inadequate testing** — no validation of critical functions
5. **Not documenting decisions** — lost knowledge transfer

## Verification Checklist
- [ ] Requirements documented
- [ ] Standards reviewed
- [ ] Design validated
- [ ] Testing established
- [ ] Documentation complete