Draft evidence-backed answers to vendor security questionnaires and RFP security sections — no invented compliance claims.
Supabase RLS Security Auditor assesses and audits Supabase apps across RLS, Auth/IAM, data security, APIs, Edge Functions, storage, secrets, third-party integrations, governance, logging, and security operations. Built for founders, vibe-coded apps, SaaS teams, and builders preparing to launch. Returns prioritized findings, exploit paths, safe SQL/architecture fixes, regression tests, and launch-blocker guidance.
Reviews AI SaaS tools for enterprise approval across data security, identity, privacy, vendor risk, governance, SaaS controls, logging, DLP, and acceptable-use requirements. Returns an approval decision, risk rating, required controls, vendor questions, and an executive-ready security review packet.
Built from real-world Linux administration and security hardening experience. This skill focuses on practical Debian and Ubuntu server security reviews for self-hosters, system administrators and small businesses. Instead of making risky automatic changes, it identifies security issues, explains their impact and provides clear, actionable hardening recommendations.
Defensive application-security auditing: turns a repo, manifest, or code snippet into an actionable report—dependency vulnerabilities, leaked secrets, insecure code patterns, and config hardening—mapped to OWASP Top 10 and ranked by severity. Finds risk and the fix only, never attack content.
A lightweight, defense-focused audit of your own/authorized website or web app, driven by the OWASP Top 10. Non-destructively checks security headers, cookie attributes, XSS/SQLi exposure, dependency CVEs, and WordPress/Next.js-specific points. Each finding comes with a severity and an immediately actionable fix (config and code examples), output as a concise report. For full engagements (RoE, formal report), use the Pentest Engagement Kit. Authorized assets only.
Automated OWASP Top 10 security audit with severity ratings, CWE mappings, and remediation code.
AI-powered SaaS and vendor renewal intelligence that analyzes contracts, invoices, renewal notices and usage evidence to identify renewal risks, potential overpayment and negotiation opportunities.
Reconcile POs, receipts, and invoices before payment. Catch duplicate bills, quantity and price mismatches, unauthorized fees, currency issues, and missing evidence with source-linked APPROVE, HOLD, and REVIEW results.