Name: tessl-labs/springboot-security-basics
Rating: 88.6 (1 reviews)
Author: tessl-labs

Blog Docs Log in Get started

tessl-labs/springboot-security-basics

Security defaults that belong in every Spring Boot application from day one.

1.79x

Quality

83%

Does it follow best practices?

Impact

97%

1.79x

Average score across 5 eval scenarios

Securityby

Passed

No known issues

Evaluation results

97%

42%

Build a Blog Platform API with Spring Boot

Criteria

Without context

With context

SecurityFilterChain bean used

100%

CORS configured with explicit origins

20%

100%

Security headers configured

100%

CSRF disabled for stateless API

100%

Rate limiting present

100%

Input validation with @Valid

75%

100%

Global exception handler safe

100%

Slug validation

25%

62%

CRUD endpoints functional

100%

Error stack traces not exposed

60%

100%

94%

25%

Build a Room Booking API with Spring Boot

Criteria

Without context

With context

SecurityFilterChain bean used

100%

CORS configured with explicit origins

30%

100%

BCryptPasswordEncoder for passwords

100%

CSRF disabled for stateless API

100%

Rate limiting on auth endpoints

100%

Security headers configured

100%

Input validation with @Valid

100%

Role-based access control

100%

Password not in responses

100%

Booking ownership enforcement

100%

Global exception handler

33%

100%

98%

61%

Build a Product Catalog API with Spring Boot

Criteria

Without context

With context

SecurityFilterChain bean used

100%

CORS configured with explicit origins

20%

100%

Security headers configured

100%

CSRF disabled for stateless API

100%

Rate limiting on API routes

100%

Input validation with @Valid

100%

Query parameter validation

37%

75%

CRUD endpoints functional

100%

Global exception handler

100%

98%

48%

Build a Task Tracker API with Spring Boot

Criteria

Without context

With context

SecurityFilterChain bean used

100%

CORS configured with explicit origins

20%

100%

Security headers configured

100%

CSRF disabled for stateless API

100%

Rate limiting on API routes

100%

Input validation with @Valid

100%

Query parameter validation

25%

75%

Global exception handler

100%

CRUD endpoints functional

100%

Lambda DSL throughout

100%

41%

Build a User Management API with Spring Boot

Criteria

Without context

With context

SecurityFilterChain bean used

100%

CORS configured with explicit origins

33%

100%

BCryptPasswordEncoder for passwords

100%

CSRF disabled for stateless API

100%

Rate limiting on auth endpoints

100%

Security headers configured

100%

Input validation with @Valid

20%

100%

Role-based access control

100%

Password not in responses

100%

Global exception handler

28%

100%

Evaluated: 16 days ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Build a Blog Platform API with Spring Boot Build a Room Booking API with Spring Boot Build a Product Catalog API with Spring Boot Build a Task Tracker API with Spring Boot Build a User Management API with Spring Boot