4. Security & Compliance

Configures Static Application Security Testing (SAST) tools to automate vulnerability detection in application code, enhancing security in DevSecOps pipelines.

Enforces Kubernetes pod security policies including Pod Security Standards, privilege restrictions, and security profiles to enhance cluster security.

Performs security code reviews using OWASP guidelines and AI security best practices to identify vulnerabilities.

Provides security patterns for GitHub Actions covering action pinning, GITHUB_TOKEN permissions, third-party risks, secret management, and runner security.

Generates OPA RBAC templates to prevent cluster-admin privilege escalation, restrict privileged verbs, and block wildcard permissions.

Framework for engineers to prioritize security risks using CVSS, exploitability analysis, and blast radius for effective vulnerability remediation.

Provides secure authentication and authorization implementation patterns including JWT, OAuth2, and RBAC for building robust access control systems and securing APIs.

Conducts comprehensive codebase audits for consistency, bugs, and documentation issues across scripts, skills, and rules.

Production-ready library of 48 battle-tested security policies for Kubernetes (Kyverno and OPA) covering pod security, RBAC, and network security with CI/CD integration.

Provides 28 production-ready Kyverno policy templates for Kubernetes security, including pod security, image validation, and network policies.

Provides security best practices and patterns to prevent common vulnerabilities in Solidity smart contracts for secure blockchain application development.

A comprehensive Go security toolkit featuring race detection, linting, vulnerability scanning, and OpenSSF-certified workflows for seamless integration.

Reviews HTML/CSS and React/TypeScript code for WCAG 2.1 Level AA accessibility compliance, identifying issues and ensuring adherence to a11y standards.

Audits frontend codebases for security vulnerabilities including XSS, CSRF, DOM, and CSP misconfigurations, adhering to OWASP guidelines.

Manages and secures sensitive credentials in CI/CD pipelines using dedicated secrets management solutions.

Implements PCI DSS compliance requirements for secure handling of payment card data and payment systems.

Configures Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade cluster security.

Demonstrates unsafe network egress patterns to test security audits and verify lint/probe failures for disallowed writes.

Provides privacy-protected AI inference capabilities using TeeML technology to ensure confidential data processing.

Provides security best practices for input validation, authentication, authorization, secrets management, and Docker security.

Delivers structured guidelines for conducting security-focused code reviews to identify vulnerabilities and enforce secure coding practices.

Provides standardized procedures for identifying, containing, and resolving IT security incidents to ensure compliance and minimize operational impact.

Conducts security code audits for WordPress themes and plugins to identify and remediate vulnerabilities.

Delivers comprehensive risk analysis for vault security systems, identifying critical vulnerabilities and threat factors for security professionals.