Skill UI

This comprehensive guide details the implementation of a Vulnerability Remediation SLA program. It covers establishing mandatory patching timeframes based on asset criticality and CVSS severity, defining exception processes, setting up escalation chains, and integrating tracking metrics (KPIs) into existing ticketing systems. Use this when defining mandatory security patching policies or maturing vulnerability management processes.

This skill guides the systematic process of conducting access reviews and certifications. It covers designing review campaigns, risk-based prioritization (e.g., privileged access), reviewer assignment, and remediation tracking. Essential for maintaining compliance with major regulations like SOX, HIPAA, and PCI DSS, ensuring user access strictly matches their job roles.

A comprehensive guide detailing the process of performing entitlement reviews and access certification campaigns using SailPoint IdentityIQ. This skill is critical for maintaining compliance (SOX, HIPAA) by automating manager reviews, targeted privileged access validation, and identifying Separation of Duties (SOD) violations. It ensures robust access governance and facilitates automated remediation workflows.

This skill guides the comprehensive assessment of an organization's cybersecurity posture using the NIST Cybersecurity Framework (CSF) 2.0. It evaluates maturity across the six core Functions (Govern, Identify, Protect, Detect, Respond, Recover) against four Implementation Tiers, culminating in a detailed gap analysis and actionable improvement roadmap for enhancing organizational resilience.

This skill guides the execution of structured purple team exercises, simulating real-world adversary techniques (Red Team) and validating the effectiveness of existing detection rules and controls (Blue Team). It is essential for Security Operations Center (SOC) teams to identify critical detection gaps, optimize analyst response playbooks, and enhance the overall security posture against specific threat actors mapped to MITRE ATT&CK techniques.

This skill guides users through performing sophisticated web cache deception attacks. It exploits path normalization discrepancies and cache key misconfigurations between Content Delivery Networks (CDNs) and origin servers. Use this methodology to test for sensitive data exposure, cache poisoning, and authentication bypass vulnerabilities in applications protected by aggressive caching layers like Cloudflare or Akamai.

This playbook guides SOC analysts through the structured triage of security incidents. It ingests alerts from SIEM platforms (Splunk, Elastic), enriches data using threat intelligence (VirusTotal, AbuseIPDB), classifies the incident type, and calculates a severity score based on asset criticality and data sensitivity. It culminates in creating structured incident tickets and notifying the appropriate response teams via paging systems, ensuring a comprehensive and standardized incident response workflow.

Hard screening skill runs deterministic VC analyses where Claude gathers context, Python scores/formats, and the pipeline produces auditable verdicts with investment thesis guidance.

Guides analysts through soft-mode startup screening by extracting company profiles, scoring eight VC dimensions, applying four investor lenses, and delivering a PASS/DECLINE verdict with a concise memo.

A comprehensive guide for preparing SaaS and cloud infrastructure companies for SOC 2 Type I and Type II audits. Covers mapping Trust Service Criteria (TSC), generating control matrices, performing thorough gap analysis, collecting evidence, and assessing overall compliance readiness across Security, Availability, Confidentiality, and Privacy domains. Essential for demonstrating operational trustworthiness to enterprise clients.

Guides founders through The Minimalist Entrepreneur lens to craft non-obvious company values, tie them to hiring, daily rituals, accountability, and anti-patterns, and make them live in remote-first businesses.

Guides aspiring entrepreneurs to discover communities they already belong to, evaluate recurring pains, and focus on problems they can solve with minimalist businesses inspired by Sahil Lavingia’s philosophy.