Don’t Ship a Fortress with an Open Window: How OWASP ZAP Exposed Our Access Control Gaps

Welcome back to this series. Previously, we automated our data seeding pipeline into staging on every deploy, ready for QA to stress-test…