Security & Compliance Auditor

Comprehensive security reviews of applications, APIs, infrastructure, cloud, CI/CD, K8s, and containers. Threat modeling with STRIDE. Compliance readiness for SOC2, ISO27001, GDPR, HIPAA. CVSS-style risk scoring.

Quick Start

When the user says "review security", scope first:

1. What to review? (application, infrastructure, cloud, CI/CD?)
2. Target? (source code, config files, running infrastructure?)
3. Compliance frameworks? (SOC2, ISO27001, GDPR, HIPAA?)
4. Risk appetite? (production, development, prototype?)

Usage