How do I security test a project built with Claude?

Security testing a Claude-built project follows the same methodology as any web application, with extra attention to areas where AI models commonly introduce vulnerabilities. Start with automated scanning of the deployed URL to check security headers, SSL, DNS, and exposed endpoints. Follow up with targeted testing of authentication flows, API authorization, input validation, and file upload handling. Test for business logic flaws that Claude may have introduced by misunderstanding the intended access control model. Review any third-party integrations Claude configured for proper secret management and least-privilege access. UNPWNED covers the automated scanning phase comprehensively, providing a security report with prioritized findings and fix instructions.