---
name: security-testing-and-remediation
description: Convert findings into safe tests, prioritized fixes, regression coverage, and verification evidence.
---

# Security Testing and Remediation

For each finding, define a non-destructive reproduction or test, expected secure behavior, smallest fix, regression test, and recheck. Prefer local fixtures and authorized test environments. Report what was tested, what was not, and residual risk.