Developed and executed a comprehensive security audit and hardening strategy for a production web infrastructure using the OWASP methodology

Developed and executed a comprehensive security audit and hardening strategy for a production web infrastructure using the OWASP methodology.

Key Activities:
1.Performed directory brute-forcing and automated vulnerability scanning to map the attack surface.
2.Implemented advanced security headers via Apache configuration to mitigate XSS and Clickjacking risks.
3.Configured cache policies to enhance server resilience against resource-exhaustion attacks.

Outcome: Successfully remediated 85% of identified security warnings and achieved a hardened environment with 0 High-Risk findings.