4. Security & Compliance

Validates and implements HTTP security headers to enhance web application security against common vulnerabilities.

Performs security validation, vulnerability scanning, and compliance checks to ensure system security and regulatory adherence.

Processes administrative cases for Crown fiduciary duty negligence, including fund mismanagement and reserve land protection failures.

Automated security analysis tool detecting critical vulnerabilities like SQL injection, XSS, and CSRF across multiple programming languages and frameworks.

Autonomously orchestrates penetration testing workflows including reconnaissance, exploitation, and privilege escalation until target flags are captured.

Real-time constitutional compliance checker for development documents, blocking insecure practices like hardcoded secrets and incomplete implementations during editing.

Analyzes network traffic patterns using DPI to identify applications, monitor bandwidth, and optimize traffic management for security and efficiency.

Analyzes binary files (exe, dll, etc.) for malware, extracts technical details, and provides threat assessment. Triggered by safety queries.

Provides installation and configuration guides for reverse engineering tools including radare2, Ghidra, GDB, and QEMU to support security analysis and malware research.

High-performance Rust hook that blocks dangerous commands before execution using SIMD acceleration and whitelist-first architecture for agent workflow safety.

Conducts WCAG 2.1/2.2 compliance audits, screen reader testing, and keyboard navigation validation for accessible web design.

Reviews Firebase code against security best practices, validating configuration, rules, and architecture for potential vulnerabilities.

Generates structured incident response runbooks with step-by-step procedures, escalation paths, and recovery actions for security incident management.

Securely retrieves website credentials from 1Password using URL-based lookup to prevent insecure practices.

Performs Software Composition Analysis (SCA) to identify open source vulnerabilities, license risks, and supply chain threats with CVE/CWE mapping for security and compliance.

Configures network isolation, trusted domains, and access policies in Claude Code sandbox for secure environment management.

Generates Software Bill of Materials (SBOM) for container images and applications, enabling vulnerability scanning, license compliance, and supply chain security analysis.

Configures network isolation, trusted domains, and access policies in Claude Code sandbox for secure network communication.

Performs dynamic binary analysis using QEMU, GDB, Frida, and strace for runtime behavior observation, syscall tracing, and memory inspection.

Maps security threats to appropriate controls and mitigations for prioritizing investments, creating remediation plans, and validating control effectiveness.

Analyzes network traffic for security incidents, malware detection, and forensic investigations using tshark command-line interface.

Provides penetration testing capabilities using Metasploit Framework for authorized security assessments and vulnerability validation.

Enables forensic investigation and threat hunting by querying operating systems via SQL for security incident response and evidence collection.

Enforces OWASP Top 10 security best practices during code reviews for authentication, authorization, and data exposure.