Product Security Requirements Specification

Create detailed security requirements for [product/feature] throughout the development lifecycle. Include: 1) Threat modeling approach with potential attack vectors, 2) Authentication and authorization requirements, 3) Data protection standards for storage and transmission, 4) Input validation and output encoding requirements, 5) Session management security controls, 6) API security measures, 7) Compliance requirements relevant to the product, 8) Secure configuration defaults, 9) Security testing methodology and acceptance criteria, and 10) Incident response considerations. Align with frameworks like OWASP while keeping requirements specific and implementable.