4. Security & Compliance

Generates and maintains security documentation including policies, incident response plans, and compliance frameworks for organizational security standards.

Conducts threat modeling using STRIDE methodology, attack trees, and risk assessment to identify security threats in systems and applications.

Conducts comprehensive security assessments through vulnerability scanning, penetration testing, and security audits to identify and mitigate risks.

Manages compliance with GDPR, SOC 2, and ISO 27001 standards, preparing for audits and meeting regulatory requirements.

Provides OAuth 2.0 authorization implementation with OpenIddict and ABP Framework, supporting permission-based, role-based access control, and multi-tenant security.

Provides secure authentication and authorization patterns for .NET applications using OAuth 2.0, OpenID Connect, JWT, and RBAC with OpenIddict and ABP Framework.

Analyzes bash commands for security risks to prevent accidental system damage or data loss before execution.

Runs local security scans using Semgrep, Trivy, and Gitleaks to detect vulnerabilities, secrets, and code issues before code push.

Escapes Python sandbox restrictions in eval/exec environments for security testing and CTF challenges.

Analyzes GitHub repository security alerts and generates actionable remediation plans for vulnerabilities, dependabot, code scanning, and secret scanning issues.

Hardens Cloudflare Workers and Pages APIs security with WAF, rate limiting, IP restrictions, and secure headers.

Conducts comprehensive security audits including vulnerability scanning, penetration testing, and compliance checks to identify and remediate security risks in systems and data.

Analyzes mobile app security by reversing Android APKs and iOS IPAs, performing exploitation, and utilizing Frida hooking for security assessments.

Performs cryptanalysis on encryption algorithms including RSA, AES, and XOR to decrypt ciphertext and analyze cryptographic vulnerabilities.

Extracts hidden data and analyzes digital forensic artifacts from images, memory dumps, disk images, and steganography for security investigations.

Configures critical security headers (CSP, HSTS, X-Frame-Options) to prevent XSS, clickjacking, and MIME confusion attacks.

A tool for identifying and exploiting common web vulnerabilities including SQL injection, XSS, and SSRF, designed for security testing and CTF challenges.

Analyzes network traffic from PCAP files and Wireshark captures to detect protocol exploits, data exfiltration, and perform traffic forensics.

Analyzes ELF/PE binaries for security flaws and constructs exploits targeting buffer overflows, heap issues, and ROP chains.

Provides pre-built security prompt templates for rapid implementation of secure features including contact forms, authenticated updates, and public APIs using Secure Vibe Coding OS utilities.

Identifies business logic vulnerabilities in AI-generated code, including race conditions, integer overflow, and calculation errors that evade functional testing.

Audits codebases for security vulnerabilities, SOLID adherence, and SDLC compliance including OWASP Top 10 and DORA metrics.

Offers prompt templates for STRIDE threat modeling, OWASP compliance, and vulnerability assessments to enhance security planning and code reviews.

Prevents XSS and injection attacks by validating and sanitizing user input, ensuring data quality and security for forms and user-generated content.