> ## Documentation Index
> Fetch the complete documentation index at: https://docs.aiptx.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Vulnerability Coverage

> Comprehensive overview of vulnerabilities detected by AIPTx

# Vulnerability Coverage

AIPTx provides comprehensive coverage of security vulnerabilities across web applications, APIs, and network infrastructure.

## Coverage Summary

AIPTx tests for vulnerabilities across the following categories:

| Category       | Coverage | Tests |
| -------------- | -------- | ----- |
| Injection      | Full     | 50+   |
| Authentication | Full     | 40+   |
| Access Control | Full     | 35+   |
| Business Logic | Full     | 30+   |
| Client-Side    | Full     | 25+   |
| Cryptography   | Full     | 20+   |
| Configuration  | Full     | 45+   |

## OWASP Top 10 Coverage

AIPTx provides complete coverage of the OWASP Top 10 2021:

<CardGroup cols={2}>
  <Card title="A01: Broken Access Control" icon="lock-open">
    * IDOR vulnerabilities
    * Privilege escalation
    * Path traversal
    * CORS misconfiguration
  </Card>

  <Card title="A02: Cryptographic Failures" icon="key">
    * Weak encryption
    * Sensitive data exposure
    * SSL/TLS issues
    * Insecure storage
  </Card>

  <Card title="A03: Injection" icon="syringe">
    * SQL injection
    * NoSQL injection
    * Command injection
    * LDAP injection
  </Card>

  <Card title="A04: Insecure Design" icon="pencil-ruler">
    * Business logic flaws
    * Missing security controls
    * Threat modeling gaps
  </Card>

  <Card title="A05: Security Misconfiguration" icon="gear">
    * Default credentials
    * Unnecessary features
    * Missing hardening
    * Verbose errors
  </Card>

  <Card title="A06: Vulnerable Components" icon="box">
    * Outdated libraries
    * Known CVEs
    * Unpatched software
  </Card>

  <Card title="A07: Auth Failures" icon="user-lock">
    * Broken authentication
    * Session management
    * Credential stuffing
  </Card>

  <Card title="A08: Software & Data Integrity" icon="shield-check">
    * Insecure deserialization
    * CI/CD security
    * Update integrity
  </Card>

  <Card title="A09: Logging Failures" icon="file-lines">
    * Insufficient logging
    * Missing audit trails
    * Log injection
  </Card>

  <Card title="A10: SSRF" icon="server">
    * Server-side request forgery
    * Internal service access
    * Cloud metadata exposure
  </Card>
</CardGroup>

## Detection Methodology

AIPTx uses multiple techniques to detect vulnerabilities:

### Static Analysis

* Pattern matching for known vulnerabilities
* Code structure analysis
* Configuration review
* Dependency scanning

### Dynamic Analysis

* Intelligent fuzzing with context awareness
* Behavioral analysis
* Response comparison
* Time-based detection

### AI-Powered Detection

* Contextual payload generation
* Anomaly detection
* Pattern learning
* Business logic analysis

## Severity Classification

AIPTx uses CVSS 3.1 for severity scoring:

| Severity     | CVSS Score | Description                                |
| ------------ | ---------- | ------------------------------------------ |
| **Critical** | 9.0 - 10.0 | Immediate exploitation risk, severe impact |
| **High**     | 7.0 - 8.9  | Significant risk, potential data breach    |
| **Medium**   | 4.0 - 6.9  | Moderate risk, limited impact              |
| **Low**      | 0.1 - 3.9  | Minor risk, minimal impact                 |
| **Info**     | 0.0        | Informational findings                     |

## Coverage by Scan Mode

| Vulnerability Type     | Quick | Standard | Deep |
| ---------------------- | ----- | -------- | ---- |
| OWASP Top 10           | ✅     | ✅        | ✅    |
| Business Logic         | ⚠️    | ✅        | ✅    |
| Race Conditions        | ❌     | ⚠️       | ✅    |
| Complex Attack Chains  | ❌     | ⚠️       | ✅    |
| Cryptographic Analysis | ⚠️    | ✅        | ✅    |
| Full Fuzzing Suite     | ⚠️    | ✅        | ✅    |

**Legend:** ✅ Full coverage | ⚠️ Partial coverage | ❌ Not included

## Compliance Mapping

AIPTx findings map to major compliance frameworks:

* **PCI DSS** - Payment Card Industry Data Security Standard
* **SOC 2** - Service Organization Control 2
* **ISO 27001** - Information Security Management
* **HIPAA** - Health Insurance Portability and Accountability Act
* **GDPR** - General Data Protection Regulation
* **NIST** - National Institute of Standards and Technology