top of page

B09

Action Bounding & Blast Radius

Tool access is granted just in time for the task and revoked on completion.

WHAT IT ADDRESSES

Persistent tool access widens blast radius between tasks.

VERIFICATION METHOD

Inspect grant and revocation records for a sampled task.

OWASP T&M

bottom of page