Security

Enterprise security with NIST/ISO27001/zero-trust frameworks. Threat modeling, GDPR compliance, DevSecOps guidance.

Detect and remediate CVE-2026-45185 "Dead.Letter" RCE vulnerabilities in Exim mail servers.

Automated detection and remediation auditing for the CVE-2026-46243 "CIFSwitch" Linux privilege escalation vulnerability.

Deep audit and detection of the Dirty Frag (CVE-2026-43284/43500) Linux privilege escalation exploit chain.

A security auditor that identifies Docker vulnerabilities, scores configurations, and generates hardened replacements.

Pre-commit security hooks: secret detection, destructive command prevention

Comprehensive security auditing for AI agents, covering prompt injection, tool permissions, and data leakage risks.

Automate secret scanning with gitleaks — detect API keys, passwords, tokens before incidents.

Build safety-first, framework-aligned incident response playbooks for ICS, SCADA, and OT environments.

Review scripts and docs for safer handling of passwords, tokens, keys, and sensitive values.

Secure, battle-tested patterns for user detection and credential prompting in Jamf and Kandji scripts

Design and analyze industrial control system anomaly detection logic for safe, protocol-aware OT security monitoring.

Review Jamf and Kandji scripts for safer user context, prompts, logging, and rollout readiness.

Generate structured, scored attack trees with AND/OR logic to visualize threat paths and identify security gaps.

Sanitize Mac admin logs and MDM evidence before sharing.

Review Apple MDM payload risk before production rollout.

Professional drafting and review of cyber security risk reports, mapping evidence to compliance frameworks.

Design and validate IEC 62443-compliant security zones and conduits for industrial (OT) networks.

Audit AI agent memory files for privacy risk and bloat.

Professional-grade security assessment framework for IoT, OT, and connected device ecosystems.

Automated security audit and health check for software dependencies across polyglot projects.

Transform raw incident logs and evidence into professional, tool-agnostic IR dashboards and executive reporting packs.

Transform complex cyber security risks, audit findings, and meeting notes into executive-grade business communications.

Professional CTI analysis skill for structured attribution using ACH, Diamond Model, and confidence scoring.

Professional network forensics and packet analysis for incident response and security investigations.

Transform CTI reports into structured attack pattern libraries mapped to MITRE ATT&CK for threat-informed defense.

Transform APT threat intelligence into MITRE ATT&CK Navigator layers and prioritized detection gap analyses.

Design, govern, and report on enterprise-grade anti-phishing training programs and simulation metrics.

Transform incident timelines into structured Cyber Kill Chain mappings and high-impact defensive roadmaps.

Convert cyber incident evidence into blameless post-mortem reports, root cause analyses, and action trackers.

GDPR Contract Review Triage Agent helps EU companies and legal teams perform structured first-pass GDPR contract review and triage.

Build, review, and automate structured incident response playbooks for enterprise security operations.

Transform raw security evidence into professional Cyber Healthcheck reports, RAG scorecards, and remediation roadmaps.

Transform technical cyber intel into executive-ready whitepapers, one-pagers, and advisory briefs.

Automated open-source license audit and risk assessment based on your project's specific distribution model.

Adaptive GDPR, CCPA, security, and AI compliance audit with severity-graded findings and law citations

A premium library of 399 vulnerability patterns and DeFi attack vectors for AI-driven bug hunting and security audits.

Automatically transforms vulnerability findings into professional, platform-ready submissions for bug bounty reports.

Accelerate your bounty hunting with smart program prioritization and vulnerability report triaging for DeFi protocols.

A high-performance ethical guardrail and IP protection layer for safeguarding AI reasoning and core logic.

Automated security auditing and risk assessment for Model Context Protocol (MCP) servers.

A security gate that intercepts sensitive agent actions like payments and deletes for mandatory human approval.

A modular governance framework for AI policy, agent risk assessment, human-in-the-loop approvals, and audit trails.

A high-performance wrapper to route security tasks directly to the Anthropic-Cybersecurity-Skills library.

Secure, zero-knowledge encrypted vault for agents to store and manage sensitive documents and digital legacy assets.

Audit dependencies for security, licenses, and health while generating a phased, low-risk upgrade and migration plan.

Professional security audit skill for web apps and APIs with structured severity-based findings and remediation plans.

ai.mcpcap · stdio

An MCP server for analyzing PCAP files.

ai.marchward · stdio

Runtime authority for AI agents: credential mediation, spend cap, approval gates, audit log.

ai.certscore · stdio

CertScore website risk-signal tools for scans, findings, evidence, and latest-domain lookups.