How do I security test a Windsurf-built project?

Deploy the application to a staging environment and run automated dynamic security scans against the live URL to identify misconfigurations, missing headers, and exposed endpoints. Perform static analysis on the generated source code using tools like ESLint security plugins and Semgrep rules designed to catch common vulnerability patterns. Test all API endpoints with malformed input, oversized payloads, and authentication bypass attempts. Verify that authorization checks prevent horizontal privilege escalation between user accounts. UNPWNED provides comprehensive automated security testing with 700+ security checks across 40 scanners that cover headers, SSL, DNS, secrets exposure, API security, and application-level vulnerabilities for Windsurf-built applications.