Hardens the Docker daemon (dockerd) through /etc/docker/daemon.json with user namespace remapping, TLS client authentication, seccomp…
Hardens Windows endpoints using CIS (Center for Internet Security) Benchmark
Hermes-only runtime security attestation and drift detection skill for operator-managed Hermes infrastructure.
Hunt for malicious PowerShell activity by analyzing Script Block Logging
Detect C2 beaconing patterns in network traffic using frequency analysis,
Automate Identitycheck tasks via Rube MCP (Composio).
Implements API schema validation using OpenAPI Specification and JSON
Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations,
Deploys XM Cyber's continuous exposure management platform to build
Implement multi-cloud CSPM to detect cloud-native misconfigurations
Implements code signing for build artifacts (binaries, packages, containers)
Configures Microsoft Entra ID (Azure AD) Conditional Access policies for
Implements DLP policies using Microsoft Purview PowerShell cmdlets and
Implements envelope encryption with AWS KMS, encrypting data locally with a data encryption key (DEK) and protecting that DEK with a…
Queries FIRST's Exploit Prediction Scoring System (EPSS) API to fetch exploitation-probability and percentile scores for CVEs, then uses…
Configures SAML 2.0 single sign-on for Google Workspace against a third-party
Chooses and applies the correct Kubernetes Pod Security Standard (Privileged, Baseline, Restricted) for a workload: what each profile…
Implements passwordless authentication using Microsoft Entra ID with
Implements Sigstore-based software signing and verification using Cosign
Configure ModSecurity WAF with the OWASP Core Rule Set (CRS) for web
Verify witness chain integrity and detect provenance gaps