4. Security & Compliance

Audits container security configurations and operations to identify vulnerabilities and ensure compliance with security standards.

Validates authentication implementations (JWT, OAuth, sessions, API keys) against security best practices, including password policies, MFA, and session security.

Configures enterprise Single Sign-On (SSO) integration for Windsurf, managing identity provider setup and authentication flows for secure access.

Validates CSRF token implementation in web forms to identify security vulnerabilities in state-changing operations.

Automatically detects path traversal vulnerabilities in web applications to enhance security posture.

Applies Juicebox-specific security best practices for API key management, access controls, and integration security audits.

Applies security best practices for Apollo.io API integrations, including key management and secure data handling to prevent breaches.

Provides best practices for managing sensitive data, ensuring privacy, and maintaining compliance with regulations like GDPR using Lindy AI.

Scans codebases for exposed secrets (API keys, passwords) using pattern matching and entropy analysis to prevent security breaches.

Automates collection of digital forensic data for security investigations and incident response workflows.

Assesses codebases and infrastructure for PCI DSS compliance, identifying security vulnerabilities and deviations from payment card data security standards.

Validates compliance with Payment Card Industry Data Security Standard (PCI DSS) requirements for security operations. Automatically activates for PCI DSS validation tasks.

Guides users through security incident response lifecycle, including classification, evidence collection, and remediation steps for breaches and ransomware.

Automates penetration test planning with structured workflows for security assessments and vulnerability identification.

Checks infrastructure configurations against SOC2, HIPAA, and PCI-DSS standards, identifying compliance violations and generating audit reports.

Validates Cross-Origin Resource Sharing (CORS) policies to ensure secure web application configurations and prevent security vulnerabilities.

Validates Vast.ai webhook signatures and securely handles event notifications for webhook endpoints.

Scans applications and data systems for GDPR compliance, identifying violations in data protection, privacy rights, and consent management.

Manages API keys securely, ensuring safe access control for API integrations and security fundamentals.

Enforces data privacy and compliance best practices for LangChain applications, including PII protection and GDPR adherence.

Validates Cross-Site Request Forgery (CSRF) protection mechanisms to ensure secure web application functionality.

Enforces data privacy and compliance controls for OpenRouter API requests, ensuring protection of PII and adherence to regulations like GDPR.

Analyzes and updates project dependencies with vulnerability scanning to enhance security posture.

Applies PostHog security best practices for secrets management, access control, and API key security implementation.