Security Audit Prompt

Prompt

Perform a security audit on this [language] code:
```
[code]
```
Check for: SQL injection, XSS, CSRF, insecure deserialization, broken authentication, sensitive data exposure, XML/JSON injection, rate limiting gaps, hardcoded secrets, and OWASP Top 10. For each vulnerability: severity (Critical/High/Medium/Low), CVSS score estimate, exploitation scenario, and remediation code.

How to use this prompt

1. 1

   Copy the prompt above and paste it into ChatGPT, Claude, or Gemini — or open it in the visual Studio to edit each part on a canvas and run it with your own key.

2. 2

   Replace any bracketed placeholders with your specifics. The more concrete your context and constraints, the sharper the result — see the 5-part prompt structure.

3. 3

   Run it, then refine. Ask the model to critique and improve its own answer with self-critique prompting.

Techniques in this prompt

Recommended models