I reviewed 5 SaaS onboarding flows this week.
Common issues I found:
1. Missing rate limiting 2. Weak password policy 3. Sensitive API responses
Has anyone recently done a security review for their SaaS?