27 tagged blue team, measured the same way as everything else here.
Browse within: ai-security 13cybersecurity 12cursor-ai 9CISO 7devsecops 7Autonomous Agents 6bug-bounty 6
Command
Apply the defense plan's fixes to the code, safely and one at a time, then record what was applied and what is left. Reads the plan and the charter, then hardens every fix, the fixes, files, or directories you name, or a priority you choose.
Command
Turn what detect found into the defense plan, one fix per finding, each rated by CVSS v4.0 (category, CVSS, priority) and tied to a charter principle. Reads the detect map and the charter, then plans every finding, named paths, or a concern you describe.
Command
Prove detected findings with runnable, defense-only evidence. For each finding the detect map carries, it writes a safe-path JavaScript test and a self-contained advisory under .lagune/proofs/. The test asserts secure behavior, never an exploit.
Command Claude Code
Route an attack vector to the appropriate specialist agent — usage: /project:attack.
Command Claude Code
Start a new engagement for a target — verifies scope, creates evidence directories, and launches recon agent.
Command Claude Code
Incident response workflow — triage, evidence collection, timeline, and IOC extraction.
Command
Pre-merge security gate on the current branch — runs secrets, SAST and dep-vuln checks on changed code, honors documented exceptions, returns a hard PASS/FAIL verdict.
Command
Hypothesis-driven threat-hunt session scaffolding — scope, hypothesis formulation, data-source binding, query handoff to siem-query, IOC input via ioc-hunter, and structured writeup with findings and handoffs to detection-engineer.
Command Claude Code
Run cs-security-analyst (AT workflow) against the Perfect Storm 8-vector crisis scenario and produce a 12-check mock comparison scorecard.
Command Claude Code
Run cs-security-analyst (AT + CA workflows) against the Fintech FortiGate zero-day scenario and produce a 7-task scorecard.
Command Claude Code
Run the full 4-agent USAP orchestration chain (cs-security-analyst → cs-incident-responder → cs-ciso-advisor → cs-security-program-manager) against the Perfect Storm scenario. Shows inter-agent handoffs and per-agent mock comparison.
Command Claude Code
Ingest threat-intelligence IOC data from local files, normalize it, and correlate it across sources, against Sigma rule coverage, and optionally against local Hayabusa evidence.
Command Claude Code
Full endpoint investigation combining SIEM queries and Hayabusa MCP analysis, correlated and mapped to MITRE ATT&CK.
Command Claude Code
Query SIEM and check detection coverage.