All field notes

CPaaS Webhook Security

Managed bug bounty playbook for CPaaS webhook and API security. Outbound fetcher SSRF, HMAC replay, inbound DLR and MO abuse, cross-tenant routing, secret leakage, idempotency bugs, PII in callbacks.