Security playbooks

Start with the security question you need to answer.

Choose a workflow for your application, endpoint, public footprint or suspicious link. Each path connects practical guidance with the relevant BugSnaps tools and services.

Choose a starting point

Assess a website or API

You own an application and need to understand its exposed routes and security boundaries.

Agree on hosts, accounts, data and testing limits before starting.
Inventory application journeys and APIs, including authenticated functions.
Investigate findings with known test accounts and record evidence; retest fixes.

Review a Windows endpoint

You need a point-in-time view of one machine's security posture.

Record the device owner, permissions and assessment time.
Review protection, updates and exposed services against the device's intended role.
Prioritize with the owner, apply approved changes and verify the affected controls.

Investigate a digital footprint

You need to understand public information associated with an organization or an account.

Define the organization, identifiers and permitted research scope.
Treat public-source matches as leads and corroborate ownership before drawing conclusions.
Document the source and date, and avoid collecting unrelated personal data.

Examine a suspicious link

You received a link and want to decide what to do without trusting its appearance.

Avoid entering credentials or opening unexpected attachments while you verify the request.
Examine the complete address and independently contact the organization using a known channel.
Escalate suspected phishing through your organization's reporting process.

Plan a broader assessment

You need human-led review across applications, networks or cloud environments.

List systems, owners and the outcome you need, including exclusions and deadlines.
Discuss test methods, access, evidence and reporting before agreeing the scope.
Assign remediation owners and arrange a focused retest for important findings.

Use results in context

Only assess systems and data you own or are authorized to investigate. A tool result or a single assessment is a point-in-time view, not proof that every risk has been found. Check its coverage and limitations, validate important findings and involve a qualified reviewer when the decision requires it.

Use the example workbook to record scope, owners, observations, exceptions and retest conditions. Replace the sample rows with your own records and store the completed file in an approved location.

Download the assessment workbook (CSV)