API security assessment for REST, GraphQL, gRPC, and WebSocket interfaces against the OWASP API Security Top 10, including authentication flow audits and secure auth patterns.
★not rated 4 9d agoA
tokens not measured
originalMIT
Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
★not rated 4 9d agoA
tokens not measured
originalMIT
Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
★not rated 4 9d agoA
tokens not measured
originalMIT
Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
★not rated 4 9d agoA
tokens not measured
originalMIT
Identity and access management: IAM architecture, SSO and MFA design, RBAC/ABAC/ReBAC access control models, authentication flow review, and access audits.
★not rated 4 9d agoA
tokens not measured
originalMIT
Security incident response: incident command and coordination, forensic evidence handling, playbooks for common incident types, and blameless postmortems.
★not rated 4 9d agoA
tokens not measured
originalMIT
Optional security hooks: a one-line security profile of the project at session start, a confirmation prompt before Claude edits secret or key files, and a local pattern scan for vulnerabilities after each edit.
★not rated 4 9d agoA
tokens not measured
originalMIT
Defensive malware analysis for incident responders: triage, static and sandbox-based dynamic analysis in an isolated lab, IOC extraction, and detection signatures.
★not rated 4 9d agoA
tokens not measured
originalMIT
Penetration testing methodology for authorized assessments: scoping and rules of engagement, attack surface mapping, test planning, and risk-rated vulnerability analysis.
★not rated 4 9d agoA
tokens not measured
originalMIT
Security orchestration, automation, and response (SOAR): platform selection, playbook design, and working automation for alert enrichment, phishing triage, and containment with human approval gates.
★not rated 4 9d agoA
tokens not measured
originalMIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: