CISO Security KitAppSecAI CISO
Broken Access Control
OWASP Top 10 A01 — review authorization flaws (BOLA, IDOR, privilege escalation, missing role checks).
What this skill does
Broken Access Control is a versioned playbook inside the CISO Security Kit. It runs on the AI CISO agent through the Procux skill runtime, producing structured, auditable output suitable for executive review and regulator submission.
- Kit
- CISO Security Kit
- Category
- AppSec
- Primary agent(s)
- AI CISO
- Tags
- owasp, appsec, access-control, bola, idor
How to use it
- Sign in to your Procux workspace and open the platform dashboard.
- Pick the AI CISO agent, then pick Broken Access Control from the CISO Security Kit catalog.
- Provide the required inputs (repo, document, endpoint, jurisdiction) — the agent runs the playbook and returns a structured report.
- Review, iterate, or export (PDF / JSON / Markdown) as part of your internal review cycle.
Related skills
- Authentication & Session FailuresOWASP Top 10 A07 — review authentication and session management flaws: broken logout, session fixation, weak credentials, MFA bypass.
- Cryptographic FailuresOWASP Top 10 A02 — audit cryptography usage: weak algorithms, key management, TLS config, at-rest / in-transit encryption gaps.
- Injection (SQLi / XSS)OWASP Top 10 A03 — SQL injection, cross-site scripting, command injection, and untrusted input handling.