//Azure DevOps - Security Testing Guide (Ado-STG)

Projects


If you need help assessing the security of your Azure DevOps or organization, we offer a wide range of security services. So, always feel free to reach out at: Sales@enterprisesoftproducts.com
NOTICE: The Azure DevOps - Security Testing Guide (Ado-STG) is currently in BETA; this means that there might be substantial changes and some parts may contain errors or not be fully implemented.

Projects are a substructure of an organization, this is where repos, boards, and pipelines reside. This section contains the methodology for testing for insecure project configuration. The issue specifically is the use of public projects, this has since been discontinued by Microsoft, and new projects cannot be created as public, and projects cannot be changed to public anymore.

  1. Testing for public projects