moai-domain-security

Threat modeling uses structured methods like STRIDE and PASTA to identify security risks in your system design. This Skill provides frameworks, data flow diagram analysis, and worksheets to systematically map threats to your architecture before implementation, reducing costly security rework.

Zero-trust assumes no implicit trust and requires continuous verification of identity and access. This Skill covers identity and access management patterns, authentication strategies, and practical implementations aligned to zero-trust principles for cloud and hybrid environments.

DevSecOps automation embeds security gates into your development workflow to catch vulnerabilities early. This Skill provides CI/CD security gate patterns, compliance automation, and templates that enforce OWASP Top 10 protections without slowing deployment.

Yes. This Skill addresses SOC 2, ISO 27001, GDPR, and CCPA governance frameworks with production-ready patterns, control mappings, and compliance checklists you can apply directly to your codebase and infrastructure.

Yes. This Skill includes cloud security patterns, cryptography implementations, and identity management guidance applicable across cloud platforms as part of enterprise-grade security architecture design.

Threat modeling identifies what can go wrong in your system design; risk modeling quantifies likelihood and impact to prioritize remediation. This Skill covers both approaches and how they integrate into governance frameworks for real-world architectures.