4. Security & Compliance

Creates composable, cacheable authorization policies using ActionPolicy for secure access control in GraphQL and ActionCable applications.

Verifies system, document, and code compliance against regulatory standards and requirements through automated validation.

Guides implementation of OAuth 2.1 / OIDC authentication using Better Auth for centralized identity management and SSO.

Enables OAuth2/OIDC SSO integration with Better Auth for Next.js applications, handling login flows, token management, and JWKS verification.

Audits code for security vulnerabilities, reviews authentication/authorization, and provides OWASP and CWE guidance for secure development.

Provides advanced vulnerability analysis including OWASP 2025, supply chain security, and risk prioritization for comprehensive security assessment.

Provides comprehensive security operations for vulnerability management, compliance checks, and secure development practices through automated scanning and audit workflows.

Provides comprehensive security engineering capabilities including penetration testing, security architecture design, threat modeling, and compliance auditing.

Framework for systematically testing LLM applications against OWASP Top 10 AI security vulnerabilities, including prompt injection and model extraction, to integrate with offensive security workflows.

Enables secure GitHub OAuth and GitHub App authentication integration with Nango, supporting user login and repository access via webhook handling.

Conducts security reconnaissance to identify attack surfaces and vulnerabilities, supporting bug bounty programs and penetration testing.

Manages system integrity, security audits, and session documentation to ensure compliance and security posture.

Provides adversarial analysis through 32 agents for red team exercises, including attack simulation, stress testing, and security critique.

Manages user account creation and configuration for the Home-Manager application.

Provides secure coding guidelines and code review practices to prevent common vulnerabilities including OWASP top risks, injection attacks, and XSS.

Reviews OAuth2 implementation PRs and issues for security vulnerabilities, RFC compliance, and breaking changes, suggesting security test cases.

Performs comprehensive security code reviews focusing on OWASP Top 10, authentication, authorization, and secure coding practices to identify vulnerabilities.

Provides secure authentication patterns using magic links, passkeys, OAuth, Redis session management, and Doppler for secret handling.

Provides security best practices for input validation, output sanitization, multi-tenant RLS, secret management, rate limiting, and OWASP Top 10 compliance in TanStack/FastAPI applications.

Performs comprehensive security analysis including vulnerability detection, OWASP Top 10 compliance checks, penetration testing simulations, and remediation guidance for security audits.

Audits code for security vulnerabilities including authentication, input validation, and cryptographic usage, with OWASP and CWE guidance.

Provides WCAG AA-compliant accessibility checklist and verification protocols for keyboard navigation, screen reader compatibility, color contrast, and ARIA labels in a Somali dialect classifier dashboard.

Identifies potential App Store rejection issues in iOS, macOS, tvOS, watchOS, and visionOS app code before submission.

Audits code against design specifications to ensure architectural compliance during code reviews and refactoring.