security-audit

Run an automated security audit by executing the /security-audit command on your codebase, files, or recent changes to identify injection flaws, authentication issues, and data exposure. It uses parallel subagents to perform in-depth analysis across various attack vectors.

Yes, you can check infrastructure as code for misconfigurations and secrets leakage. The security audit supports both web application and IaC analysis, scanning for exposed credentials and infrastructure security flaws using parallel subagents.

Yes, the security audit supports optional compliance checks for PCI-DSS, HIPAA, SOC2, and GDPR. You can include these specific compliance framework checks during your codebase analysis to ensure your application meets regulatory security requirements.

The best way to review recent code changes for security vulnerabilities is to run /security-audit on your recent updates. This performs a targeted security analysis to identify potential threats like session issues and data exposure before deployment.

Yes, you can audit specific files and directories instead of an entire project. The security audit offers scope flexibility, allowing you to target entire projects, specific files, directories, or just recent code changes for vulnerability identification.

Using parallel subagents for code review and penetration testing accelerates comprehensive security analysis. It allows the audit to simultaneously evaluate multiple attack vectors like injection flaws, auth issues, and infrastructure misconfigurations across your codebase efficiently.