sparkfinderoven-claude-security-compliance-suite

OWASP vulnerability scanning identifies security issues in your codebase and assigns CVSS severity scores to each finding. The structured output includes prioritized remediation guidance and actionable upgrade paths for vulnerable dependencies.

Compliance auditing for GDPR and SOC2 maps security requirements to control evidence by scanning your codebase. It generates audit-ready gap findings that align with ISO27001 standards, producing structured reports for operational decision-making.

STRIDE threat modeling and incident response playbooks can be generated together to identify threats and define response runbooks. The workflow covers triage, containment, eradication, recovery, and lessons learned phases for structured security planning.

Secret scanning identifies high-risk credentials in your code, while IAM least-privilege checks assess permissions for overreach, MFA gaps, and stale access patterns. Both produce structured findings with severity context and remediation guidance.

Dependency CVE detection performs targeted vulnerability discovery with CVSS scoring and provides actionable upgrade paths for dependencies. Findings include severity context and remediation guidance to prioritize and resolve security issues efficiently.

Code scanning for security and compliance requires a consistent workflow to generate structured findings, and operates on the codebase at the current working directory. It focuses on OWASP issues, dependency CVEs, secrets, and IAM risks without runtime dynamic analysis.