Security checklists
Checklists runs a security checklist against an application or a release. Keel ships two templates: a web application security test based on the OWASP Web Security Testing Guide, and a pre-merge security review based on the OWASP Top 10:2025.
Start a run
Section titled “Start a run”Press Start a run, pick a template, and give the run a title and a target, such as an application or a release. An owner and a due date are optional. Each run keeps its own results, so you can run the same template again for the next release.
Record results
Section titled “Record results”Mark each item Pass, Fail or N/A, and add a note where it helps. The run shows how many items have a result so far.
A failed item can become a remediation task. Keel creates the task on the Tasks page with the item, its severity, your note and a link back to the run.
Complete the run
Section titled “Complete the run”Completing a run records it as evidence for each control the template covers that your workspace has. A control the workspace does not have gets no link, and the evidence is still kept.