domains / families / security / testing-for-sensitive-data-exposure

testing-for-sensitive-data-exposure

separate

Identifying sensitive data exposure vulnerabilities including API key

When to use

• During authorized penetration tests when assessing data protection controls
• When evaluating applications for GDPR, PCI DSS, HIPAA, or other data protection compliance
• For identifying leaked API keys, credentials, tokens, and secrets in application responses
• When testing whether sensitive data is properly encrypted in transit and at rest
• During security assessments of APIs that handle PII, financial data, or health records

Skill page

Source