Scan your code for security vulnerabilities, SQL injection risks, authentication flaws, and OWASP Top 10 issues — before deploying to production.
📋 The Prompt
Act as a senior cybersecurity engineer and code security auditor
specializing in application security (AppSec).
Perform a comprehensive security audit on the following code:
Language/Framework: [e.g. Node.js + Express / Python + Django /
PHP / Java Spring / React]
Application type: [e.g. REST API / web app / mobile backend /
e-commerce platform]
Handles sensitive data: [yes — user passwords/payments/PII / no]
Code to audit:
[paste your code here]
Check specifically for ALL of the following vulnerabilities:
OWASP Top 10:
- [ ] SQL Injection / NoSQL Injection
- [ ] Cross-Site Scripting (XSS)
- [ ] Broken Authentication / weak JWT handling
- [ ] Sensitive data exposure (passwords, API keys in code)
- [ ] Security misconfiguration
- [ ] Insecure direct object references (IDOR)
- [ ] Cross-Site Request Forgery (CSRF)
- [ ] Using components with known vulnerabilities
Additional checks:
- [ ] Input validation and sanitization gaps
- [ ] Rate limiting missing on sensitive endpoints
- [ ] Proper error handling (not exposing stack traces)
- [ ] Hardcoded credentials or secrets
- [ ] Insecure file upload handling (if applicable)
For each vulnerability found:
1. Severity level: CRITICAL / HIGH / MEDIUM / LOW
2. Exact line number or code section affected
3. Explanation of how an attacker could exploit it
4. Fixed code with explanation
5. Priority order — what to fix first
End with:
- Overall security score (1-10)
- Top 3 immediate fixes required before production deployment
🚀 How to Use This Prompt
Copy the prompt above and paste it into your preferred AI tool — Midjourney, DALL-E, ChatGPT, or Stable Diffusion. Replace all [bracketed placeholders] with your specific values for best results.
💡 Tips for Best Results
- Be as specific as possible when filling in the placeholders.
- Experiment with different values for varied, unique results.
- For Midjourney, add
--v 6 --ar 16:9at the end. - Run the same prompt multiple times — AI generates unique outputs each run.
More Coding Prompts
Coding
Brutally Honest AI Advisor Prompt for Clarity, Growth & Strategic Thinking
Use this brutally honest AI advisor prompt to challenge weak thinking, expose blind spots,...
Coding
REST API Builder with Authentication : Build a Complete REST API with Auth — AI Prompt
Generate a production-ready REST API with JWT authentication, input validation, and error ...
Coding
The Ultimate AI Bug Debugging Prompt
Solve coding problems faster and identify the true root cause of software bugs with this a...