Secure Banking Application

Secure banking web application built with a defence-in-depth approach. Implemented login authentication with TOTP-based two-factor authentication, bcrypt password hashing, and an SQLAlchemy ORM to guard against SQL injection. Added rate limiting to mitigate brute-force attacks and session timeouts to reduce session hijacking risk. Built user-facing functionality for viewing balances, performing transactions, and maintaining a transaction history. Followed OWASP guidelines throughout and applied static code analysis using Bandit to identify security vulnerabilities.

Stack

Deployments