Scan your code for security vulnerabilities, SQL injection risks, authentication flaws, and OWASP Top 10 issues — before deploying to production.
📋 The Prompt
Act as a senior cybersecurity engineer and code security auditor
specializing in application security (AppSec).
Perform a comprehensive security audit on the following code:
Language/Framework: [e.g. Node.js + Express / Python + Django /
PHP / Java Spring / React]
Application type: [e.g. REST API / web app / mobile backend /
e-commerce platform]
Handles sensitive data: [yes — user passwords/payments/PII / no]
Code to audit:
[paste your code here]
Check specifically for ALL of the following vulnerabilities:
OWASP Top 10:
- [ ] SQL Injection / NoSQL Injection
- [ ] Cross-Site Scripting (XSS)
- [ ] Broken Authentication / weak JWT handling
- [ ] Sensitive data exposure (passwords, API keys in code)
- [ ] Security misconfiguration
- [ ] Insecure direct object references (IDOR)
- [ ] Cross-Site Request Forgery (CSRF)
- [ ] Using components with known vulnerabilities
Additional checks:
- [ ] Input validation and sanitization gaps
- [ ] Rate limiting missing on sensitive endpoints
- [ ] Proper error handling (not exposing stack traces)
- [ ] Hardcoded credentials or secrets
- [ ] Insecure file upload handling (if applicable)
For each vulnerability found:
1. Severity level: CRITICAL / HIGH / MEDIUM / LOW
2. Exact line number or code section affected
3. Explanation of how an attacker could exploit it
4. Fixed code with explanation
5. Priority order — what to fix first
End with:
- Overall security score (1-10)
- Top 3 immediate fixes required before production deployment
🚀 How to Use This Prompt
Copy the prompt above and paste it into your preferred AI tool — Midjourney, DALL-E, ChatGPT, or Stable Diffusion. Replace all [bracketed placeholders] with your specific values for best results.
💡 Tips for Best Results
- Be as specific as possible when filling in the placeholders.
- Experiment with different values for varied, unique results.
- For Midjourney, add
--v 6 --ar 16:9at the end. - Run the same prompt multiple times — AI generates unique outputs each run.
More Coding Prompts
Coding
AI Database Schema Designer — SaaS & App Projects
Generate an optimized, production-ready database schema for any app or SaaS project — wi...
Coding
Production-Grade Coding Prompt for Advanced Software Engineering & System Design
Most coding prompts generate tutorial-level answers, generic examples, or speculative code...
Coding
AI SQL Query Optimizer Prompt — Fix Slow Queries Instantly
Diagnose and fix slow, inefficient SQL queries — with index recommendations, rewritten q...