4. Security & Compliance

Guides cyber threat intelligence analysts in applying the Diamond Model and Structured Analytic Techniques for systematic threat analysis, attribution, and hypothesis evaluation.

Creates and manages Institutional Review Board (IRB) protocols to ensure ethical compliance and regulatory adherence in human subjects research studies.

Provides security best practices for managing API keys, validating user input, and securing sensitive code implementations.

Provides security patterns for web forms including CSRF protection, XSS prevention, and input sanitization to secure sensitive data handling.

Provides security guidelines for sandboxed environments, covering command validation, path policies, OS-level isolation, and violation tracking.

Recovers Bitcoin wallets by extracting private keys from wallet.dat files and verifying balances.

Provides expertise in cybersecurity frameworks (NIST, ISO 27001), security architecture, incident response, and vulnerability management for security program design and risk assessment.

Scans container images, filesystems, and IaC for security vulnerabilities, blocking critical and high severity issues before code commit.

Provides expertise in regulatory compliance, contract analysis, and risk management for corporate governance and legal frameworks (SOX, GDPR, HIPAA).

Background security audit tool identifying critical vulnerabilities, authentication flaws, and data exposure risks, injecting P0 findings into the main agent.

Provides memory forensics capabilities for analyzing memory dumps and investigating system activity using MemProcFS.

Assists in memory analysis and forensic investigations using MemProcFS for memory dump examination and system activity tracking.

Audits Dart FFI code for security vulnerabilities, including cryptographic contexts, memory leaks, and secure memory handling.

Read-only audit of HyperFleet repositories against team architecture standards, generating JIRA-ready gap reports for compliance tracking.

Provides security-first development patterns and best practices for Python applications to prevent common vulnerabilities.

Provides expert guidance on EU GDPR, German BDSG, and ISO 27701 compliance, covering data protection, privacy, and breach management.

Expertly guides IT risk management using ISO 27005, ISO 31000, and ISO 27001 standards, optimizing assessments via Data Reuse of existing assets and processes.

Provides expert guidance on ISO 27001:2022, BaFin, DORA, NIS2, and German compliance frameworks with security management automation.

Manages Eufy Security devices (HomeBase S380, SoloCam) via CLI, enabling snapshot capture, alarm forwarding to Tuya, and alarm mode configuration.

Provides command-line interface for secure access to Dashlane password vault and automated credential management.

Automates CI security scanning for secrets, dependencies, SAST, and exception management in development pipelines.

Creates or refines security policies ('Blue Book') for applications handling PII, PHI, and financial data, including threat modeling and compliance requirements.

Guides secure configuration of Claude Code permissions in settings.json, covering allow, ask, and deny rules with security best practices.

Expert guidance on PKI and X.509 certificate management including structure, CSR generation, signing, revocation, and key management with OpenSSL.