4. Security & Compliance

Provides best practices for integrating Better Auth, a TypeScript-based authentication framework, ensuring secure user authentication flows and compliance.

Provides identity governance and administration capabilities for SailPoint IGA, covering identity lifecycle, access certifications, role management, and security workflow integrations.

Provides vulnerability scanning for code, dependencies, containers, and infrastructure as code with CI/CD integration and security policy management.

Provides integration and management for Google Chronicle SIEM/SOAR, enabling threat detection, investigation, and response workflows using Chronicle APIs and YARA-L rules.

Provides integration and management for Microsoft security tools (Defender, Sentinel, Entra ID) using Graph API and KQL for security analytics and compliance.

Analyzes military security and operations ideas for strategic submission, supporting decision-making in defense frameworks.

Manages privileged access via CyberArk PAM, enabling secure credential rotation, session management, and security workflow integrations for privileged account governance.

Provides comprehensive CrowdStrike Falcon platform operations including threat detection, incident analysis, and vulnerability management.

Integrates CISA KEV and NVD data to enrich vulnerability management, track remediation deadlines, and build threat intelligence feeds.

Enables integration with Wiz cloud security platform for CSPM, CWPP, vulnerability management, and security posture analysis via APIs and GraphQL.

Normalizes CrowdStrike Falcon data exports (JSON/CSV) for security reporting, vulnerability analysis, and workflow integration.

Provides assistance with Palo Alto Networks security platform tools including Prisma Cloud, Cortex XDR, and XSOAR for API integration, incident response, and cloud security posture management.

Converts Splunk SPL detection rules to Microsoft Sentinel (KQL), Google SecOps (YARA-L), and CrowdStrike LogScale (CQL) for seamless SIEM migration and multi-platform coverage.

Provides structured workflows for vulnerability assessments, penetration testing, security audits, and compliance reviews following frameworks like NIST and ISO 27001.

Generates professional vulnerability assessment reports from security tools like CrowdStrike and CISA KEV for executive summaries and compliance documentation.

Performs security code review on authentication, secrets, validation, and logging, documenting findings in SECURITY_AUDIT.md without altering code.

Validates and filters fuzzing harnesses based on API correctness, reachability, and runtime behavior to ensure effective security testing.

Tests PostgreSQL database exceptions including RLS policy violations, constraint errors, and permission denials for security validation.

Tests PostgreSQL Row-Level Security (RLS) policies to verify user access and security policies in multi-tenant applications.

Audits project dependencies for security vulnerabilities, licensing issues, and unused packages, reporting findings without modifying code.

Reviews save/load integrity, recovery, and tamper policies for game data, generating a security compliance report in markdown format.

Securely manages secrets, credentials, and API keys using 1Password vault operations and .env environment mounting.

Scans repositories for confidential information and sensitive data before public release to prevent security breaches and data leaks.

Provides a security review checklist for FastAPI/Python applications, covering authentication, SQL injection, and XSS vulnerabilities.