b48f56c1__Application_Firewalls___OWASP__Comment
[Criterion] Documentation complete The documentation for the application is complete in such detail, that potential vulnerabilities relating to security can be detected and rectified. This especially pertains to the documentation of the architecture and the source code [Points] 2 [Comment] 
Especially important is a detailed documentation of the architecture, as well as a description of the interfaces between the individual components and a description of the validations taking place on these interfaces. Documentation on this level of detail is normally not available.
Category:OWASP Best Practices: Use of Web Application Firewalls - OWASP