How do I security test ChatGPT generated code?

Security testing ChatGPT code requires both static analysis of the source code and dynamic testing of the running application. Start by reviewing the generated code for OWASP Top 10 vulnerabilities, focusing on input validation, authentication, and access control logic. Deploy the application in a staging environment and run automated security scans against it to detect issues that only appear at runtime, such as missing security headers, insecure cookies, and exposed endpoints. Test edge cases that ChatGPT likely did not consider, such as malformed inputs and concurrent requests. UNPWNED automates the currently enabled outside-in checks against the submitted deployment URL; it does not inspect source or business logic. SQL-injection, reflected-XSS, and path-traversal probes are not enabled in the current production profile.