WEB — Web Security
15 controls in the Web Security domain
WEB-01Web Security
WEB-01.1Unauthorized Code
WEB-02Use of Demilitarized Zones (DMZ)
WEB-03Web Application Firewall (WAF)
WEB-04Client-Facing Web Services
WEB-05Cookie Management
WEB-06Strong Customer Authentication (SCA)
WEB-07Web Security Standard
WEB-08Web Application Framework
WEB-09Validation & Sanitization
WEB-10Secure Web Traffic
WEB-11Output Encoding
WEB-12Web Browser Security
WEB-13Website Change Detection
WEB-14Publicly Accessible Content Reviews