Security & access

Automate Security & Compliance Audits

A security and compliance bundle for auditing systems, closing compliance gaps, and preparing documentation for SOC2/GDPR audits.

Audit Code for Security Vulnerabilities

An autonomous Security Auditor agent that scans codebases against OWASP Top 10 and produces a CVSS-scored remediation roadmap.

Implement Comprehensive Data Privacy Protections

Autonomous agent that scans codebases for personal data processing, evaluates GDPR and CCPA compliance, and implements privacy-by-design controls with audit

Automate Compliance Framework Implementation

Autonomous agent that implements and automates SOC 2, ISO 27001, and GDPR compliance frameworks with continuous monitoring, evidence collection, and

Build Compliance Reports and Audit Documentation

Builds comprehensive compliance reports for SOX, GDPR, HIPAA, SOC 2, ISO 27001, PCI DSS. Ensures evidence-based documentation and risk-based assessments.

Configure DAST Scans for Web App Security

AI skill for configuring DAST scans - OWASP ZAP/Burp Suite setup, JWT/session authentication, and scan scope optimization.

Audit Systems for GDPR Compliance

AI assistant for GDPR compliance auditing, identifying gaps in systems, code, policies, and processes, offering actionable remediation guidance.

Validate JWT Tokens Securely

Expert knowledge resource for validating JSON Web Tokens (JWT) with secure signature verification, algorithm confusion prevention, and comprehensive claim

Configure Network ACLs Across Platforms

Expert in Network Access Control List (ACL) configuration across Cisco IOS/NX-OS, AWS VPC NACLs, Juniper, and other network security appliances. Deep knowledge

Ensure PCI DSS Compliance

Expert AI for PCI DSS compliance, covering all 12 requirements, CDE scoping, data protection, access control, and vulnerability management.

Analyze Content for Safety and Harm

Python skill for detecting harmful text and image content with Azure AI Content Safety, including custom blocklists.

Authenticate Securely to Azure Services

.NET skill for Azure.Identity authentication - DefaultAzureCredential chains, managed identity, and sovereign clouds.

Authenticate Azure Services Securely

Python skill for Azure Identity authentication - DefaultAzureCredential's fallback chain, managed identity, and token scopes.

Manage Fleet Devices with AI

MCP server for AI assistants to query and manage Fleet Device Management - hosts, compliance, and vulnerabilities.

Manage Keycloak Identity and Access

Python MCP server for Keycloak's REST API - manage users, clients, roles, groups, realms, and auth flows via natural language.

Scan MCP Servers for Security Vulnerabilities

MCP security scanner detects vulnerabilities like credential leaks, prompt injection, and tool poisoning in MCP implementations. Secure your AI systems.

Manage Okta Users and Groups with AI

An MCP server for Okta user and group management, plus experimental onboarding automation, in Claude Desktop.

Securely Execute Remote SSH Commands

Let an AI assistant run remote SSH commands and transfer files without ever exposing SSH credentials to the model.

Scan Repositories for Vulnerabilities

AI-powered security scanner MCP server for Python dependency vulnerabilities, secrets, and Dockerfile analysis.

Securely Control Filesystem Access for AI Clients

Filesystem MCP server that blocks AI access to sensitive files and directories using .gitignore-style .mcpignore rules.

Secure LLM Data with FF3 Encryption

MCP server demonstrating FF3 format-preserving encryption for digit-domain data with multiple authentication modes and stdio/HTTP transports.

Securely Execute Shell Commands for AI

MCP server that exposes shell command execution to AI clients with secure-by-default allowlisting, built in Go, runs in Docker or from source.

Filter Chat Messages for Blocking

Given a chat message decide whether to block it

Securely Access APIs with TLS Configuration

Configures mutual TLS (mTLS) client certificates - PEM or PFX - for promptfoo's HTTP provider.

Evaluate MCP Tool Calling Security

Promptfoo MCP provider example for direct tool-calling security testing - path traversal, injection, SSRF, and structured-response parsing.

Moderate AI Content with Llama Guard

Promptfoo example moderating content with Meta's LlamaGuard 3/4 models across 14 safety categories on Replicate.

Moderate LLM Inputs and Outputs

Safeguard LLM inputs/outputs with Llama Guard. Classify content based on safety taxonomies.

Secure GenAI Apps with ZenGuard

Secure AI Requests with Cloudflare Gateway

A promptfoo example routing OpenAI, Anthropic, and Groq requests through Cloudflare AI Gateway.

Secure HTTP Communication with mTLS

Configure HTTP provider with TLS/SSL for mutual TLS (mTLS) authentication. Securely connect services using certificate-based security.

Test Model Armor Security with Promptfoo

A promptfoo example testing Google Cloud Model Armor's prompt sanitization API against injection and sensitive-data attacks.

Moderate Content with Llama Guard

A promptfoo example moderating GPT-5-mini output with LlamaGuard 3 and 4 via Replicate, including category-specific checks.