4. Security & Compliance

Provides input validation and sanitization patterns to prevent injection attacks and ensure safe user input handling.

Provides security patterns for LLM integrations to defend against prompt injection and hallucinations, ensuring safe output validation and context separation.

Secures MCP servers against prompt injection, tool poisoning, and enforces permission management via validated tool descriptions and allowlists.

Provides secure authentication and authorization patterns for login flows, JWT, OAuth 2.1, and role-based access control implementation.

Provides multi-layered security validation for AI pipelines and LLM integrations, eliminating single points of failure.

Automates security scanning for code dependencies and secrets, integrating vulnerability detection into CI/CD pipelines.

Provides OWASP Top 10 vulnerability details and mitigation strategies for security audits and code reviews.

Specializes in implementing Firebase Authentication for Google ecosystem apps, including social logins, phone verification, and mobile-first security patterns.

Specializes in implementing modern authentication solutions including WebAuthn, passkeys, and passwordless login with user-friendly UI components.

Specializes in Auth0 security configuration: attack protection, MFA setup, token security, and regulatory compliance.

Scans code for security vulnerabilities using UBS before commits or when security-related keywords are mentioned.

Troubleshoots authentication issues including 401 errors, token problems, and MSAL configuration for Entra ID and JWT.

Performs code audits to detect security flaws and provides recommendations for secure coding practices.

Scans Python web applications for OWASP Top 10 vulnerabilities and dependency CVEs, generating actionable security reports.

Scans Next.js and TypeScript/JavaScript projects for security vulnerabilities including OWASP Top 10, XSS, and hardcoded secrets, generating actionable reports.

Aggregates real-time security news, updates, and breach reports for proactive threat awareness and response.

Conducts web security assessments including penetration testing and vulnerability scanning to identify and mitigate security risks.

Tests for prompt injection vulnerabilities in AI applications to identify and mitigate security risks in chatbot systems.

Conducts read-only security audits on Clawdbot's configuration, identifying hardening opportunities and generating vulnerability reports without system modifications.

Assists with Governance, Risk, and Compliance (GRC) topics including SOX, GDPR, and ServiceNow GRC implementation.

Manages security operations including incident response, vulnerability handling, threat analysis, and SIEM case management for security teams.

Provides security best practices guidance for ServiceNow instances, including authentication, SSO, MFA, and protection against XSS/injection vulnerabilities.

Manages ServiceNow access control lists (ACLs) and security configurations for role-based, row-level, and field-level security.

Provides expert reviews from a single specialist role (e.g., Security, Performance) on specific targets like code or components.