Security & Compliance

Who This Bundle Is For

Security specialists, DevSecOps teams, and organizations preparing for SOC2 and GDPR audits.

What's Included

MCP Servers

Sentry — security monitoring and error tracking in production.

Memory — storage for audit context and compliance requirements.

Filesystem — code and configuration analysis for vulnerabilities.

Skills

Bug Bounty Program — organizing vulnerability discovery programs.

Audit Preparation Guide — preparation for SOC2 and ISO 27001 audits.

API Authentication — secure authentication and authorization.

Agents

Data Privacy Engineer — ensuring GDPR and privacy compliance.

Compliance Automation Specialist — automating compliance processes.

Legal Compliance Checker — verifying legal requirements.

Code Reviewer — security-focused code review.

How to Use

1. Conduct an audit of your existing system
2. Identify compliance gaps
3. Create a remediation plan with Compliance Automation Specialist
4. Implement controls with Data Privacy Engineer
5. Prepare documentation for auditors

Example Prompt

Create a checklist for SOC2 Type II audit:
- Trust Service Criteria: Security, Availability
- Current infrastructure: AWS, PostgreSQL, Rails
- Team: 15 developers
- Timeline: 3 months until audit

Compliance Framework

┌─────────────────────────────────────────────┐
│           COMPLIANCE FRAMEWORK              │
├─────────────────────────────────────────────┤
│                                             │
│  ┌─────────┐  ┌─────────┐  ┌─────────┐     │
│  │  SOC2   │  │  GDPR   │  │ISO 27001│     │
│  └────┬────┘  └────┬────┘  └────┬────┘     │
│       │            │            │           │
│       └────────────┼────────────┘           │
│                    ▼                        │
│  ┌─────────────────────────────────────┐   │
│  │        SECURITY CONTROLS            │   │
│  ├─────────────────────────────────────┤   │
│  │ • Access Management                 │   │
│  │ • Data Encryption                   │   │
│  │ • Logging & Monitoring              │   │
│  │ • Incident Response                 │   │
│  │ • Vendor Management                 │   │
│  └─────────────────────────────────────┘   │
│                                             │
└─────────────────────────────────────────────┘

Outcomes

• Audit readiness
• Documented processes
• Automated compliance monitoring
• Hardened infrastructure