Application Security White-Box Audit Checklist Form
Complete this checklist to document your application security white-box audit. Please answer each section thoughtfully to ensure a thorough review.
Project or Application Name
*
Auditor Name
*
First Name
Last Name
Date of Audit
*
 -
Month
 -
Day
Year
2 digit month, 2 digit day, 4 digit year
Date
Code Review Conducted
*
Yes
Partial
No
Not Applicable
Authentication and Authorization Controls Reviewed
*
Yes
Partial
No
Not Applicable
Input Validation and Output Encoding Checked
*
Yes
Partial
No
Not Applicable
Error Handling and Logging Mechanisms Reviewed
*
Yes
Partial
No
Not Applicable
Security Testing Performed (e.g., static/dynamic analysis, fuzzing)
*
Yes
Partial
No
Not Applicable
Additional Comments or Findings
Submit Checklist
Should be Empty: