CATEGORY 6 / 59

Authentification

25 checks in the reference catalogue. Each row appears under this category in AxiSecurity campaigns and full reports.

Badge guide: Free = passive diagnostic or public signal; Paid = bounded or authenticated automated/technical check; Expert = internal evidence, human audit, controlled load or mandate-based penetration testing.

C06-T001
source 3

Test formulaire de connexion

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T002
source 3

MFA utilisateurs sensibles

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T003
source 3

MFA administrateurs

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T004
source 3

MFA superadministrateurs

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T005
source 3

MFA comptes techniques lorsque possible

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T006
source 3

WebAuthn / FIDO2 si disponible

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T007
source 3

Protection brute force

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T008
source 3

Rate limiting

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T009
source 3

Temporisation progressive

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T010
source 3

Détection credential stuffing

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T011
source 3

Protection password spraying

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T012
source 3

Politique de mots de passe

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T013
source 3

Stockage hash sécurisé

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T014
source 3

Argon2id / bcrypt ou équivalent robuste

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T015
source 3

Sel unique

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T016
source 3

Absence de mot de passe en clair

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T017
source 3

Mot de passe jamais retourné par API

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T018
source 3

Réinitialisation de mot de passe sécurisée

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T019
source 3

Token de reset aléatoire

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T020
source 3

Token de reset limité dans le temps

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T021
source 3

Token de reset à usage unique

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T022
source 3

Pas d'énumération des comptes

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T023
source 4

Changement mot de passe révoquant les sessions sensibles

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T024
source 4

Détection connexion anormale

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope

C06-T025
source 4

Journalisation connexion administrateur

Authorisation: verified_safe

View tutorial →

Paid

demo · preproduction · production

Authenticated

Engine, evidence or review depending on scope