Name: tessl-labs/aspnet-security-basics
Rating: 87.4 (1 reviews)
Author: tessl-labs

Blog Docs Log in Get started

tessl-labs/aspnet-security-basics

Security defaults that belong in every ASP.NET Core application from day one.

1.91x

Quality

83%

Does it follow best practices?

Impact

94%

1.91x

Average score across 5 eval scenarios

Securityby

Passed

No known issues

Evaluation results

100%

53%

Build a Blog Platform API with ASP.NET Core

Criteria

Without context

With context

HTTPS redirection configured

100%

HSTS configured

100%

CORS configured with explicit origins

100%

Security headers middleware

100%

Rate limiting on write endpoints

100%

General rate limiting

100%

Authentication configured

100%

Authorization with public/private split

80%

100%

Input validation on post creation

40%

100%

Comment body validation

40%

100%

Author-only update enforcement

100%

No hardcoded secrets

75%

100%

Correct middleware order

75%

100%

90%

39%

Build an E-Commerce Order API with ASP.NET Core

Criteria

Without context

With context

HTTPS redirection configured

100%

CORS configured with explicit origins

100%

Security headers middleware

100%

Rate limiting on mutation endpoints

41%

General API rate limiting

100%

Authentication configured

100%

Authorization on protected endpoints

80%

100%

Input validation on order request

30%

100%

Query param validation

50%

Users can only access own orders

100%

Content-Security-Policy header

100%

Correct middleware order

60%

100%

91%

31%

Build an Inventory Management API with ASP.NET Core

Criteria

Without context

With context

HTTPS redirection configured

100%

CORS configured with explicit origins

100%

Security headers middleware

100%

Rate limiting on mutation endpoints

100%

Rate limiting on bulk import

37%

Authentication configured

100%

Role-based authorization

100%

Input validation on product creation

75%

87%

Input validation on stock adjustment

50%

75%

Bulk import validation and size limit

57%

100%

Search parameter validation

40%

80%

Correct middleware order

100%

92%

53%

Build a Task Tracker API with ASP.NET Core

Criteria

Without context

With context

HTTPS redirection configured

100%

CORS configured with explicit origins

100%

Security headers middleware

100%

Rate limiting configured

100%

Stricter rate limit on mutations

Authentication configured

100%

All endpoints require authentication

100%

Project owner authorization for delete

62%

100%

Input validation on task creation

40%

100%

Input validation on project creation

60%

100%

Query parameter validation

40%

100%

Project membership check

100%

Correct middleware order

66%

100%

50%

Build a User Management API with ASP.NET Core

Criteria

Without context

With context

HTTPS redirection configured

100%

HSTS configured for production

100%

CORS configured with explicit origins

100%

Security headers middleware

100%

Rate limiting on auth endpoints

100%

General API rate limiting

100%

Authentication middleware configured

100%

Authorization policies defined

62%

100%

Input validation on request models

20%

100%

Password not in responses

100%

No hardcoded secrets

100%

Correct middleware pipeline order

60%

100%

Evaluated: 16 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Build a Blog Platform API with ASP.NET Core Build an E-Commerce Order API with ASP.NET Core Build an Inventory Management API with ASP.NET Core Build a Task Tracker API with ASP.NET Core Build a User Management API with ASP.NET Core