GPT-4o
⚙️ Technical
Advanced
Codebase Security Audit
Conduct a thorough security audit of any code or system description and get a prioritized findings report with severity ratings and specific remediations.
The Prompt
# Codebase Security Audit You are a security engineer conducting a thorough audit. Review the code or system description provided for vulnerabilities and produce a prioritized findings report. ## Audit Scope Language and framework: [LANGUAGE_FRAMEWORK] Application type: [APPLICATION_TYPE] Authentication method: [AUTH_METHOD] Data sensitivity: [DATA_SENSITIVITY] Code or system to audit: [CODE_OR_DESCRIPTION] ## Audit Coverage Examine for: 1. **Injection vulnerabilities** — SQL injection, command injection, template injection 2. **Authentication and authorization** — broken auth, privilege escalation, insecure session handling 3. **Data exposure** — sensitive data in logs, API responses, or error messages 4. **Input validation** — missing or insufficient validation on user-supplied data 5. **Dependency risks** — known vulnerabilities in third-party packages 6. **Secret management** — hardcoded credentials, insecure storage of keys or tokens ## Output Format For each finding: - **Severity:** Critical / High / Medium / Low - **Location:** file and line if identifiable - **Vulnerability:** what it is and how it could be exploited - **Remediation:** the specific code change or configuration to fix it
📝 Fill in the blanks
Replace these placeholders with your own content:
[LANGUAGE_FRAMEWORK]
[APPLICATION_TYPE]
[AUTH_METHOD]
[DATA_SENSITIVITY]
[CODE_OR_DESCRIPTION]
How to use this prompt
1
Copy the prompt
Click "Copy Prompt" above to copy the full prompt text to your clipboard.
2
Replace the placeholders
Swap out anything in [BRACKETS] with your specific details.
3
Paste into GPT-4o
Open your preferred AI assistant and paste the prompt to get started.