Skill UI

Evaluates infrastructure setups against SOC2, HIPAA, and PCI-DSS, highlights violations, and recommends fixes when users request compliance checks or audit reports.

This skill provides comprehensive guidance on achieving PCI DSS (Payment Card Industry Data Security Standard) compliance. It covers best practices for designing, implementing, and auditing secure payment processing systems, including network protection, data encryption, tokenization, and adhering to strict data minimization policies.

Automates PCI DSS validator work by guiding advanced security practitioners through best practices, generating production-ready code/configurations, and validating results against compliance frameworks.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

This expert simulates a compliance expert, specializing in regulatory requirements for software systems, including GDPR, HIPAA, SOC2, and PCI-DSS. It performs comprehensive audits, identifies compliance gaps, and generates actionable implementation plans, technical controls, and policy templates to ensure adherence to industry standards.

Perform Static Application Security Testing (SAST) to identify critical security vulnerabilities, including SQL injection, XSS, hardcoded secrets, and path traversal, directly from source code. Supports multi-language ecosystems (Python, JavaScript, Java, Go, etc.) and major frameworks, enabling crucial pre-deployment security validation and compliance checks (OWASP, PCI-DSS).

Provides a Senior SecOps engineer toolkit for running SAST/DAST, dependency CVE scans, policy checks, and compliance automation (SOC2/PCI-DSS/HIPAA/GDPR) during audits, CVE response, or CI/CD hardening.

Validates PCI DSS compliance by running the pci-dss-validator plugin on codebases or infrastructure configs, then reports violations and remediation steps for developers, security engineers, and compliance officers.

Implement AWS Config rules for continuous compliance monitoring of AWS resources, align managed and custom rules with CIS/PCI DSS, activate SSM Automation remediation, and aggregate multi-account compliance data.

Implementing AWS Security Hub to centralize findings, map CIS/PCI DSS/NIST standards, and automate remediation with EventBridge/Lambda across multi-account environments for clearer compliance dashboards.

This guide details the implementation of Delinea Secret Server for robust Privileged Access Management (PAM). It covers infrastructure deployment (IIS, SQL Server), configuring secret templates, automating the onboarding of credentials, and establishing centralized vaulting for sensitive accounts. It is essential for organizations needing to meet compliance mandates (SOX, PCI-DSS) by eliminating plaintext credentials and automating password rotation.

A comprehensive checklist for validating the operational readiness of any Navan API integration before deployment to a live production environment. This guide covers critical areas including credential security (rotation, secret management), robust error handling, rate limit strategies, Single Sign-On (SSO) setup, data synchronization, and compliance auditing (PCI DSS, GDPR). Use this when ensuring mission-critical API stability.