How do I security test a Base44 application?

Security testing a Base44 application requires scanning the deployed application externally since the platform does not provide direct access to the generated source code for static analysis. Focus on exposed API authentication and authorization, HTTP security headers, SSL/TLS configuration, and common web vulnerabilities. Automated scanners that work against live URLs are practical for Base44 apps. UNPWNED's currently enabled outside-in Deep Scan runs up to 702 configured checks across 33 coverage scanners plus a supporting endpoint-discovery pass after current ownership proof; authentication, authorization, and backend logic require separate review.