bmad-security-review

Threat modeling systematically identifies trust boundaries, attack vectors, and vulnerabilities in your architecture. This skill generates a structured threat model by analyzing your system design, data flows, and deployment pipeline to surface risks before implementation.

A security review inventories dependencies, misconfigurations, and security controls while assessing compliance requirements. This skill produces a security-gap assessment tied to your architecture decisions and compliance considerations, with findings prioritized for remediation.

Remediation planning translates security gaps into prioritized backlog items with assigned owners and acceptance criteria. This skill generates a remediation backlog from threat modeling and vulnerability assessment, ready for your delivery pipeline.

Security reviews are critical before deploying features or systems to production. This skill applies threat modeling and vulnerability assessment to features, systems, and deployment pipelines, verifying prerequisites like architecture decisions and test strategy.

Yes. This skill conducts threat modeling and vulnerability assessment across both new features and existing deployments. It works with your current architecture and data flows to identify and mitigate risks regardless of system maturity.

Security reviews assess your system against compliance requirements relevant to your architecture and data handling. This skill integrates compliance considerations into threat modeling and gap assessment, producing findings aligned with your regulatory obligations.