Notes

Applied security research and inspection notes. Structured observations on web application risk and assessment practice.

Evidence-Based Reporting vs Tool Output Dumps

10 Mar 2026 · reporting, inspection-model, methodology

Why structured inspection reporting differs from automated vulnerability output and why that distinction matters.

06 Mar 2026 · risk-visibility, inspection-model, startups

Why structured risk visibility should precede growth in web application systems.

04 Mar 2026 · risk, inspection-model, methodology

Understanding the limits of numerical severity scoring in structured web application inspections.

02 Mar 2026 · inspection-model, methodology, security-testing

Clarifying the distinction between structured web application inspection and adversarial security simulation.

26 Feb 2026 · automation, inspection-model, methodology

Understanding the role and limitations of automated scanning within a structured web application security inspection.

26 Feb 2026 · owasp, inspection-model, methodology

Using the OWASP Top 10 as a reference layer within structured, evidence-based web application inspections.