How does Edgescan peform Broken Authentication Testing?
Edgescan includes Broken object level authorization as part of testing, and for API it's included as API2:2023.
Version Number: v1.0.1
Published Date: 9 Apr 2024
____________________________________________________________________________
Broken authentication is best performed as a manual check however; Edgescan can still cover limited automated testing here such as weak rotation of keys and validation of static tokens, credentials and keys used in the URL.