god-security-core

Threat modeling evaluates your application's attack surfaces using structured methodologies to identify and mitigate security risks before deployment. This skill provides the framework to map threats against your specific infrastructure configurations and architecture.

Zero trust architecture enforces strict access controls by continuously verifying authentication and authorization across your infrastructure. This skill guides the implementation of zero trust principles to harden your application security posture against lateral movement.

Securing your software supply chain ensures the integrity and safety of your dependencies, while secrets management handles storing and rotating sensitive information. This skill outlines best practices to enforce both supply chain security and safe secrets handling.

SAST and DAST tooling are utilized for static and dynamic analysis to detect vulnerabilities during security audits. This skill integrates these tools to evaluate your application against industry standards and the OWASP Top 10.

Hardening container security prevents breaches by isolating workloads, and secure cryptography requires using validated algorithms and configurations. This skill provides guidelines to apply both cryptographic standards and container hardening best practices.

Incident response is covered through a structured approach to incident detection and mitigation. This skill includes methodologies to assess your infrastructure and application configurations against best practices to minimize security breach impact.