4. Security & Compliance

Identifies project tech stack and security-relevant features to enable effective security audits and analysis.

Provides standardized templates for security audit reports with consistent structure for findings, severity classification, ASVS mapping, and remediation steps.

Provides secure implementation patterns for fixing authentication and authorization vulnerabilities, including credentials, JWT, and access control in multiple programming languages.

Provides OWASP ASVS 5.0 requirements database for security audits, including chapter structure, control objectives, and verification requirements for all 17 domains.

Provides secure code patterns to remediate injection vulnerabilities (SQL, Command, XSS) with language-specific examples for vulnerable and secure implementations.

Provides a security checklist for OWASP compliance, covering authentication, XSS, SQL injection, CSRF, and input validation to prevent common vulnerabilities.

Provides regex patterns and grep commands for detecting common security vulnerabilities in multiple programming languages including JavaScript, Python, Go, Java, Ruby, and PHP.

Provides abuse prevention and rate limiting features to combat malicious actors and ensure platform safety.

Automates binary analysis, function extraction, and decompilation in IDA Pro using Python scripts for security and malware research.

Provides a 5-layer defense architecture to secure multi-agent systems and MCP pipelines against prompt injection and unauthorized access.

Provides implementation patterns for OAuth 2.0 and OpenID Connect to securely handle authentication and authorization flows with identity providers.

Reference for configuring tool permissions, file access restrictions, and agent security settings using --allowedTools flags in Claude Code.

Provides security patterns for RAG and CAG systems, ensuring multi-tenant isolation, access control, and secure data handling.

Provides regulatory guidance for GDPR, CCPA, and privacy compliance to ensure data protection and adherence when handling personal data.

Conducts security assessments, hardening, and compliance checks for Kubernetes and OpenShift clusters, including RBAC, NetworkPolicies, and CIS benchmarks.

Provides rate limiting, content moderation, and malicious actor detection to prevent abuse in applications.

Secures applications using OWASP standards, input validation, and secrets management.

Detects AI-generated and AI-assisted code patterns in audits, contractor reviews, and academic integrity checks with confidence scoring.

Provides application security utilities for OWASP compliance, input validation, and secrets management to secure web applications.

Ensures compliance with GDPR and CCPA regulations for user data handling, consent management, and privacy protection.

Secures applications by implementing OWASP standards, input validation, and secrets management to prevent common vulnerabilities.

Provides authentication patterns for implementing secure user sign-in, SSO, passkeys, and session management flows.

Provides tools for account security including MFA, session management, and recovery to protect user accounts.

Provides secure authentication patterns for implementing sign-in, SSO, passkeys, and session management flows.