Orchestrate Comprehensive Security Hardening Program
Multi-agent security hardening workflow that coordinates SAST, DAST, threat modeling, and defense-in-depth controls across application, infrastructure, and
Why it matters
Implement a defense-in-depth security strategy across all application layers using coordinated multi-agent orchestration. This workflow automates assessments, remediation, and continuous monitoring for a resilient security posture.
Outcomes
What it gets done
Conduct comprehensive security assessments including vulnerability scanning, threat modeling, and architecture review.
Remediate critical vulnerabilities and harden backend, frontend, and mobile application security.
Implement robust authentication, authorization, infrastructure security controls, and secrets management.
Perform penetration testing and validation to ensure effectiveness of implemented security measures.
Install
Add it to your toolbox
Run in your project directory:
curl -fsSL https://spark.entire.vc/get/ag-security-scanning-security-hardening | bash Overview
Security Scanning Security Hardening
This skill orchestrates a comprehensive security hardening program through coordinated multi-agent workflows. It implements defense-in-depth strategy across all application layers, coordinating specialized security agents to perform vulnerability assessments, threat modeling, remediation, and continuous validation following modern DevSecOps principles with shift-left security. Use this skill when running a coordinated security hardening program, establishing defense-in-depth controls across app, infra, and CI/CD, or prioritizing remediation from scans and threat modeling. Do not use this skill when you only need a quick scan without remediation work, you lack authorization for security testing or changes, or the environment cannot tolerate invasive security controls.
What it does
This skill orchestrates a comprehensive security hardening program through coordinated multi-agent workflows. It implements defense-in-depth strategy across all application layers, coordinating specialized security agents to perform vulnerability assessments, threat modeling, remediation, and continuous validation following modern DevSecOps principles with shift-left security.
When to use - and when NOT to
Use this skill when running a coordinated security hardening program, establishing defense-in-depth controls across app, infra, and CI/CD, or prioritizing remediation from scans and threat modeling.
Do not use this skill when you only need a quick scan without remediation work, you lack authorization for security testing or changes, or the environment cannot tolerate invasive security controls.
Inputs and outputs
You provide the target system or application to be hardened (referenced as $ARGUMENTS throughout the workflow).
You receive a comprehensive security transformation across four phases that establishes a security baseline, applies remediations for high-risk issues, implements controls and validates defenses, and completes validation and compliance checks.
Integrations
The workflow integrates with Semgrep and SonarQube for SAST analysis, OWASP ZAP for DAST scanning, Snyk and Trivy for dependency auditing, GitLeaks and TruffleHog for secrets detection, OWASP ESAPI for input validation, DOMPurify for XSS prevention, ProGuard and R8 for code obfuscation, OAuth2/OIDC with PKCE for authentication, TOTP/WebAuthn/FIDO2 for MFA, HashiCorp Vault and AWS Secrets Manager for secrets management, Burp Suite and Metasploit for penetration testing, and maps threats to the MITRE ATT&CK framework using STRIDE methodology.
Who it's for
This skill is designed for security teams, DevSecOps engineers, and platform architects responsible for implementing enterprise-grade security postures. It serves organizations that need coordinated, multi-layer security hardening rather than point-in-time scans, and teams with the authority and infrastructure to implement invasive security controls and remediation across development, staging, and production environments.
Source README
[Extended thinking: This workflow implements a defense-in-depth security strategy across all application layers. It coordinates specialized security agents to perform comprehensive assessments, implement layered security controls, and establish continuous security monitoring. The approach follows modern DevSecOps principles with shift-left security, automated scanning, and compliance validation. Each phase builds upon previous findings to create a resilient security posture that addresses both current vulnerabilities and future threats.]
FAQ
Common questions
Discussion
Questions & comments · 0
Sign In Sign in to leave a comment.