Automate Security & Compliance Audits

This bundle assembles a security and compliance workflow for teams preparing for audits like SOC2 and GDPR. It coordinates security monitoring and error tracking in production, persistent storage of audit context and compliance requirements across sessions, and codebase/configuration analysis for vulnerabilities, alongside skills for running a bug bounty program, preparing for SOC2/ISO 27001 audits, and implementing secure API authentication. The workflow proceeds in five stages: audit the existing system, identify compliance gaps, build a remediation plan, implement controls (access management, data encryption, logging and monitoring, incident response, vendor management), and prepare documentation for auditors - mapping a single set of security controls to multiple frameworks (SOC2, GDPR, ISO 27001) at once rather than treating each as a separate project.

Use it when a security or DevSecOps team is actively preparing for a SOC2, GDPR, or ISO 27001 audit and needs a structured, multi-stage process from gap analysis through auditor-ready documentation - not just a single scan or checklist. It is not a substitute for an actual third-party auditor or legal counsel; its compliance-checking and documentation components support and accelerate that process rather than certify compliance on their own.

Begin by running an audit of the existing system and infrastructure, then define the compliance gaps against your target framework(s). Example prompt to kick off planning:

Create a checklist for a SOC2 Type II audit:
- Trust Service Criteria: Security, Availability
- Current infrastructure: AWS, PostgreSQL, Rails
- Team: 15 developers
- Timeline: 3 months to audit

From there, build a remediation plan, implement the identified controls, and assemble documentation for auditors.

Security engineers, DevSecOps teams, and compliance leads preparing for SOC2, GDPR, or ISO 27001 audits who need a coordinated, multi-stage path from initial gap analysis to auditor-ready documentation and monitored security controls.