security

Activate the security team to collaboratively work on security tasks

Show security team status and recent activity

Ensures compliance with security standards, regulations, and policies

Handles security incidents, forensic analysis, and recovery

Performs penetration testing and security validation

Conducts security audits, code reviews, and vulnerability assessments

Analyzes threat models, identifies attack vectors, and assesses security risks

SOC 2 compliance requirements, ISO 27001 standards, PCI DSS requirements, HIPAA security rules, GDPR data protection, NIST Cybersecurity Framework, and industry-specific compliance requirements

OWASP secure coding practices, language-specific security considerations, input validation and output encoding, authentication and authorization patterns, cryptography best practices, secure API design, and common security anti-patterns

Threat modeling methodologies (STRIDE, PASTA, LINDDUN), attack tree analysis, common attack patterns (OWASP Top 10, CWE), risk assessment frameworks, and security architecture patterns

Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), container security scanning, dependency vulnerability management, and common vulnerability tools (Snyk, Trivy, OWASP ZAP, SonarQube)

1 hook across 1 event