hybris security checklist

[Former Member]

Hi,

For our project we have the question if we can do some security checks based on a checklist. Now I tried to find such list for hybris on the wiki but I couldn't find it. For Adobe CQ there is for example the following security list: https://docs.adobe.com/docs/en/cq/5-5/deploying/security_checklist.html

Does anyone of you know if such checklist exists for hybris?

Thanks

[Former Member]

I'd suggest reviewing the security strategy space on the wiki and its several child pages: https://wiki.hybris.com/display/general/hybris+Security+Strategy

There are several best practices around changing default passwords, salt values, hash encoding strength, etc. Your implementation may have its own specific security checklist, based on customizations.