4. Security & Compliance

Assigns role permissions in Bknd using syntax, allow/deny effects, conditional policies, and entity-specific access control.

Enables row-level security implementation in backend systems with user ownership, multi-tenant isolation, and data access control features.

Configures public and authenticated access patterns in Bknd, including anonymous roles, public/private entity exposure, and mixed access modes.

Secures Bknd API endpoints using auth middleware, role-based access, and permission checks for custom HTTP triggers and plugin routes.

Provides a comprehensive guide for BlazeMeter network security configuration, including allowlisting, DNS caching management, and API monitoring security best practices.

Automates Kubernetes security audits, generating PSS/NSA-compliant reports by analyzing cluster resources and topology.

Audits safety patterns in software systems to identify gaps, regressions, and improvement opportunities for safety compliance.

Inspects cross-agent witness ledger for changes, sealed transactions, and pending items with constitutional metrics and rule enforcement (F1-F9).

Provides security best practices for secure coding, authentication, authorization, and data protection in applications handling sensitive data.

Guide to implementing security practices for Epic Stack, including Content Security Policy (CSP), rate limiting, and session security.

Comprehensive guide for implementing authentication, sessions, OAuth, 2FA, and passkeys within the Epic Stack framework.

Guides comprehensive security audits to identify vulnerabilities in authentication, input validation, cryptography, and API security.

Guides comprehensive security scans of web dependencies to detect outdated libraries, CVEs, and security misconfigurations in deployed applications.

Conducts code audits to ensure WCAG compliance, identifying issues in ARIA, keyboard navigation, and screen reader compatibility for inclusive design.

Automates security scans on authentication, API endpoints, and user data modifications to detect vulnerabilities before deployment.

Validates Row-Level Security policies, audits API routes, and scans for vulnerabilities to ensure OWASP compliance.

Validates Row-Level Security policies, performs OWASP compliance checks, and scans for vulnerabilities in API routes and code.

Validates AI skills against production-level quality criteria across nine categories, delivering actionable reports with scores and improvement recommendations.

Conducts security audits, vulnerability scans, and penetration testing to identify and mitigate security risks in systems and applications.

Validates adherence to 9 constitutional articles and Phase-1 gates before implementation to ensure project governance compliance.

Conducts security audits, vulnerability scans, and penetration testing to identify and mitigate system risks using industry standards.

Validates end-to-end requirements traceability from design to tests, ensuring compliance and identifying coverage gaps.

Provides security checklists for authentication, input handling, key management, and API endpoints to prevent vulnerabilities.

SDK for secure execution of untrusted Python/Node.js scripts and AI code in Linux containers at the edge.