Wikimedia Security Team/Security reviews

= Review process = Before a security-critical feature, extension, service, or library is deployed by the WMF, it needs a security review by the security team. Additionally, third-party systems where confidential data is stored should have a security review as well. Based on a risk assessment of the feature, extension, service, or product that uses the library, different levels of review will be required.

= Review levels =

= Review requirements =