You can use 空きウォッチ Aki without an account or payment details. Bookings and payments take place on Rakuten Travel. We check protections against invalid input and code injected into pages, and test that changes preserve those protections.
OWASP ASVS 5.0.0 is a public set of requirements for checking web application security. We use selected requirements to guide reviews of input handling and browser protections.
Japan's IPA publishes practical web security guidance for developers and operators. We refer to it when checking protections against injected page content and unwanted actions initiated by other websites.
Before each release, the deployment pipeline runs automated source-code checks, checks dependencies for known vulnerabilities, and runs security regression tests. These cover selected input handling, request-origin and browser protections to catch regressions introduced by changes.
These developer checks cover selected guidance only. They are not an independent certification or a full assessment against either guide. Automated checks cannot establish that a site has no vulnerabilities.
Privacy Policy
Back to home