security-insecure-defaults

Identify and fix insecure default configurations in applications, frameworks, and infrastructure. Use when auditing default settings, reviewing configuration files, checking for overly permissive defaults, or hardening deployments against configuration-based attacks.