Secure Application & API Review Hub
Turn application threats into security requirements, verification criteria and an evidence-based release recommendation.
- Map the design and trust boundaries.
- Identify threats and measurable requirements.
- Review or perform authorised verification.
- Record a scoped release recommendation and exceptions.
Enable JavaScript to document your assessment and generate working files.
Official framework guidance