This self-audit checklist is educational content, provided as-is and not legal or security advice. Apply any test described only to infrastructure you own or are authorized to test. We don't sell mitigation and aren't affiliated with any vendor named.