AVERAGE SCORES
STRIDE HIT RATE
TOP MISSED THREATS
1.
S
Cross-Site Request Forgery (CSRF)
missed 7×
2.
R
Insufficient Server-Side Logging
missed 7×
3.
D
Resource Exhaustion – No Rate Limiting
missed 7×
4.
S
API Bearer Token / Key Theft
missed 7×
5.
R
Insufficient API Audit Logging
missed 7×