A07:2025 — Identification and Authentication Failures
Verified by Precogs Threat Research
What are Authentication Failures (OWASP A07:2025)?
Failures in authentication mechanisms: credential stuffing, brute force, weak passwords, session fixation, improper session invalidation, missing MFA, and insecure credential recovery processes.
Impact
Confirmation of identity, authentication, and session management is critical. These failures enable account takeover, identity theft, and unauthorized access to sensitive functions.
How Precogs AI Addresses A07
Precogs AI Binary DAST tests authentication mechanisms in compiled web applications for brute-force susceptibility, session management flaws, and credential handling weaknesses.