security-auditor

Security vulnerability identification scans code, configurations, and dependencies against OWASP Top 10 categories and secure coding practices to detect weaknesses in authentication, authorization, data protection, and API security, producing a prioritized list of findings with remediation steps.

A security audit examines code logic, infrastructure configurations, dependency vulnerabilities, and authentication mechanisms to map threat risks, identify gaps against OWASP standards, and assess data protection controls, enabling comprehensive vulnerability detection across your entire stack.

Remediation guidance translates detected vulnerabilities into concrete steps, best practices, and prioritized fixes that address root causes in authentication flows, data handling, configuration hardening, and secure coding patterns, enabling teams to fix issues systematically.

Threat modeling against OWASP frameworks analyzes code and infrastructure to identify attack vectors, prioritize risks by severity, and map vulnerabilities to specific threat categories, producing structured findings that inform security remediation planning.

Security audits apply threat modeling, OWASP category mapping, and systematic vulnerability scanning across code, configs, and dependencies to identify security-specific risks; code reviews focus on logic and style. Audits produce actionable remediation with risk prioritization and multi-context dialogue.

Security audits work on existing codebases using integrated tools like file reading, grep-based analysis, glob patterns, and bash commands to scan dependencies, configurations, and code patterns without requiring pre-existing infrastructure or specialized deployment.