segmentation

Analyze network configurations to evaluate zone architecture and trust boundaries.

Updated Apr 19, 2026
One-click install
npx skills add https://github.com/do360now/security-agents --skill segmentation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: segmentation
Source: https://github.com/do360now/security-agents/tree/main/.claude/skills/segmentation
Command: npx skills add https://github.com/do360now/security-agents --skill segmentation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill facilitates comprehensive assessments of network segmentation architectures to identify and remediate vulnerabilities, ensuring robust boundary controls.

Core Features & Use Cases

  • Network Artifact Discovery: Locate configuration files related to VLANs, security groups, and infrastructure definitions across cloud and on-premise environments.
  • Zone Mapping & Boundary Evaluation: Analyze and document trust zones such as DMZs, data tiers, and management networks, verifying enforcement points like firewalls and ACLs.
  • Remediation Guidance: Identify flat networks, missing segmentation controls, and insecure inter-zone routing, providing actionable fixes. Ideal for network engineers, security analysts, and architects seeking to enhance segmentation posture.

Quick Start

Review your network configuration files to confirm proper segmentation boundaries and enforcement mechanisms before deploying new infrastructure or undergoing security audits.

Frequently Asked Questions about segmentation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I check my network segmentation for security compliance?

Network segmentation compliance is verified by analyzing configurations to evaluate zone architecture, trust boundaries, and east-west traffic controls against best practices. This process helps security professionals confirm enforcement points like firewalls and ACLs are effective.

What is the best way to evaluate trust boundaries and east-west traffic controls?

Evaluating trust boundaries involves analyzing network configurations to document zones like DMZs and data tiers, verifying that east-west traffic controls and enforcement mechanisms are properly applied across the infrastructure.

How do I identify flat networks and missing VLAN segmentation in my infrastructure?

Identifying flat networks requires discovering configuration files related to VLANs and security groups to locate missing segmentation controls and insecure inter-zone routing. This analysis provides actionable remediation guidance to fix architectural vulnerabilities.

Can I use this to review network configurations across cloud and on-premise environments?

Yes, network configuration reviews support both cloud and on-premise environments. The Skill locates infrastructure definitions and security group configurations across these hybrid setups to map trust zones and verify boundary enforcement points.

When do I need to perform a network segmentation architecture review?

A network segmentation architecture review is needed before deploying new infrastructure or undergoing security audits. It helps identify vulnerabilities, confirm proper boundary controls, and ensure robust segmentation posture across your zones.

Why does my inter-zone routing allow insecure traffic between data tiers?

Insecure inter-zone routing occurs when boundary controls and ACLs are misconfigured or missing between data tiers. Analyzing your network configurations helps pinpoint these flat network segments and provides actionable fixes to restrict traffic.