Lazo Lab Sign up

Web Security / Building secure apps

Lesson 24 of 27

Logging and monitoring

Log logins, failures, admin actions and errors so you can notice attacks and investigate. Never log passwords or full card numbers.

Key points

  • Log who, what, when, from where
  • Never log secrets
  • Alert on unusual activity
Watch a video on thisOpens YouTube search results for “Logging and monitoring” in a new tab

Quiz · +10 XP

Which should never be written to logs?

Log in to save progress and earn XP.