ERT-AUTH-008
JWT weaknesses (alg:none, weak secret, no exp)
CriticalA07:2025CWE-347
Why it matters
Rate limits, cookies, tokens, JWTs, password reset. This check looks specifically for: jwt weaknesses (alg:none, weak secret, no exp).
How to fix it
Open the finding in Emerald Red Team for a fix prompt tailored to your stack and AI tool.
How we test it
Active — sends safe payloads; requires verification and your opt-in.
Does your app have this problem?
Create a free account and verify your app to test for it.
Scan my app — free