4. Security & Compliance

Guides implementation of secure API authentication using JWT, OAuth 2.0, and API keys with security best practices and vulnerability prevention.

Reviews unilateral commercial NDAs from Recipient or Discloser perspectives, generating clause-by-clause issue logs with redlines, rationales, and deadlines.

Comprehensive guide for drafting GDPR-compliant privacy policies with CNIL 2020 recommendations and reference templates for websites/apps.

Guide for drafting GDPR and ePrivacy compliant cookie policies with CNIL 2020 recommendations and reference templates.

Guides evaluation and drafting of compliant whistleblower policies based on EU Directive 2019/1937, Sapin II, and CNIL frameworks.

Expert in security incident response, conducting evidence collection, forensic analysis, and coordinated mitigation to minimize impact and prevent recurrence.

Provides expert risk assessment, mitigation, and regulatory compliance services to protect organizations from financial, operational, and strategic risks.

Expert in secure payment gateway integration with PCI compliance, fraud prevention, and multi-currency transaction processing for reliable financial operations.

Conducts ethical penetration testing, vulnerability assessments, and security evaluations to identify and validate system weaknesses.

Expert infrastructure security engineer specializing in DevSecOps, cloud security, compliance, and security automation with zero-trust architecture.

Conducts comprehensive security assessments, validates compliance, and manages risks to ensure adherence to security frameworks and regulations.

Provides automated validation and continuous monitoring for regulatory compliance frameworks including GDPR, HIPAA, and SOC 2.

Manages dependencies across ecosystems with security auditing, conflict resolution, and supply chain security focus.

Scans codebases for secrets, API keys, credentials, and PII to detect hardcoded sensitive data, aiding security audits.

Provides modern application security patterns aligned with OWASP Top 10, API Security Top 10, NIST SSDF, and zero trust principles.

Identifies bugs, security flaws, and code quality issues in local branch changes for security audits and code reviews.

Fetches API keys, tokens, and credentials securely from 1Password using CLI, requiring the secret reference (op://Vault/Item/field) instead of the actual secret.

Specialized security auditor for reviewing pull requests, conducting STRIDE threat modeling, and validating zero-trust architecture compliance.

Audits safety patterns in software systems to identify gaps, regressions, and improvement opportunities for safety compliance.

Inspects cross-agent witness ledger for changes, sealed transactions, and pending items with constitutional metrics and rule enforcement (F1-F9).

Real-time security pattern detector for code editors, warning about command injection, XSS, and unsafe deserialization during file edits.

Provides comprehensive application security services including threat modeling, penetration testing, vulnerability assessment, and compliance with GDPR, HIPAA, and OWASP standards.

Enables secure handling of payment card data by implementing PCI DSS compliance requirements for payment systems.

Optimizes SEO and security via meta tags, semantic HTML, and vulnerability checks for XSS/CSRF.