Marketplace

Design secure authentication flows: OAuth2, OIDC, session management, token rotation, and multi-factor authentication patterns.

Use when adding, upgrading, or auditing third-party packages: judge vulnerabilities, maintenance health, and supply-chain risk before they ship.

Use to adversarially test an LLM app, agent, or tool pipeline for prompt-injection/jailbreak weakness and produce a scored hardening report.

Use to scan agent transcripts, traces, and telemetry for leaked secrets or PII before they are stored or shared, and to fix the root cause.

Invoke to audit or tighten an AI agent's tool/MCP permissions: diff granted access against observed usage and recommend a least-privilege allowlist.

Harden APIs against attacks: input validation, output encoding, rate limiting, CORS, CSP, and injection prevention.

Design zero trust network architectures: identity-based perimeters, microsegmentation, and continuous verification.

Use when credentials may be exposed in code, config, logs, or git history: find them, judge real exposure, and drive rotation and cleanup.

Use when auditing a codebase or diff for security defects: map attack surface, hunt OWASP-class bugs, and rate each finding by real exploit path.

Use when designing or changing a feature and you need a STRIDE threat model: map the system, enumerate threats per element, and rank mitigations.

Review cryptographic implementations: algorithm selection, key management, random number generation, and protocol-level flaws.

Design least-privilege IAM policies for AWS, GCP, and Azure: role design, permission boundaries, and access auditing.

Design incident response playbooks: detection triggers, severity classification, containment, eradication, and communication.

Plan and scope penetration tests: attack surface mapping, test methodology selection, and finding documentation.

Audit systems for privacy compliance: data minimization, purpose limitation, consent management, GDPR/CCPA alignment.

Scan codebases for leaked credentials, API keys, and tokens: pattern matching, entropy analysis, and safe remediation.

Audit software supply chain security: SBOM generation, dependency provenance, artifact signing, and CI/CD hardening.