4. Security & Compliance

Provides Python-based security tools for exploit development, network analysis, and web security automation using libraries like pwntools and scapy.

Enables development of security exploits, proof-of-concept code, payloads, and bypass techniques for vulnerabilities including buffer overflows and RCE.

Conducts security audits to detect vulnerabilities including exposed secrets, SQL injection, and XSS, while validating security best practices.

Expert in penetration testing methodologies including OWASP and PTES, covering reconnaissance, scanning, exploitation, and reporting for security assessments.

Expert in developing exploits for binary vulnerabilities including buffer overflows, ROP chains, and format string attacks. Creates proof-of-concept code for security research.

Enforces security standards for secure credential handling and authentication protocols.

Validates Phylax Credible Layer assertions against historical blockchain transactions and known exploits to ensure security integrity.

Enforces Apex Trader Funding account compliance rules and optimizes Rithmic data feed for NinjaTrader 8, including loss limits and drawdown monitoring.

Provides a pre-deployment checklist for NinjaTrader trading strategies to ensure critical bug-free code and compliance with Apex and WSGTA trading regulations.

Conducts OWASP Top 10 security audits, checks authentication/authorization guards, and identifies injection and data exposure vulnerabilities in code.

Conducts comprehensive security audits for platforms, testing entry points, scanning credentials, and generating remediation reports.

Conducts aggressive evidence-based audits to verify alignment between project claims and actual implementation reality.

Automates secret rotation and validation (e.g., API keys, credentials) according to project security runbooks, ensuring compliance and reducing exposure risks.

Validates tenant isolation and Row-Level Security (RLS) configurations to ensure secure multi-tenant data access.

Validates Row-Level Security (RLS) policies and role-based access controls to ensure proper data access enforcement.

Automates security audits by integrating GitLeaks as a pre-commit hook to detect secrets in code before commits.

Performs vulnerability assessments and security reviews to identify and mitigate system risks.

Provides expert guidance on implementing secure authentication using Auth.js v5 (NextAuth) with Edge-First architecture.

Architects secure server-side actions for AI applications, ensuring robust security practices in AI development workflows.

Ensures code compliance with amplihack's ruthless simplicity, brick philosophy, and Zen minimalism through systematic review.

Audits data security and loose coupling in React Server Components (RSC) against established security policies and standards.

Automates codebase audits to detect security vulnerabilities and verify compliance with key regulations including GDPR and HIPAA.

Applies secure coding practices to identify and mitigate vulnerabilities, covering OWASP Top 10 and security-sensitive code patterns.

Reviews security error handling against OWASP Top 10 standards, integrating error handling and log management for compliance evaluation.