Skill UI

This skill guides users through conducting a comprehensive maturity assessment using the NIST Cybersecurity Framework (CSF) 2.0. It covers calculating an organization's cybersecurity posture against the six core functions (Govern, Identify, Protect, Detect, Respond, Recover) and the four Implementation Tiers (Partial to Adaptive). The process culminates in detailed gap analysis and the creation of a strategic improvement roadmap.

This skill guides the execution of structured purple team exercises, simulating real-world adversary techniques (Red Team) and validating the effectiveness of existing detection rules and controls (Blue Team). It is essential for Security Operations Center (SOC) teams to identify critical detection gaps, optimize analyst response playbooks, and enhance the overall security posture against specific threat actors mapped to MITRE ATT&CK techniques.

Nikto is a powerful open-source web server and web application scanner designed for comprehensive vulnerability assessment. It tests against over 7,000 potentially dangerous files, checks for outdated server software (over 1,250 versions), and identifies common vulnerabilities including XSS, SQL injection, misconfigurations, and weak SSL/TLS settings. It is essential for penetration testing and rigorous security auditing.

Performs TAM/SAM/SOM sizing via Claude-led research and Python computation while summarizing competitive landscapes and tech-stack maturity to support venture capital diligence.

Explains any startup equity, legal, or term sheet question—SAFE notes, convertible rounds, and preferred stock—while covering both investor and founder lenses and flagging red flags or negotiable points.

A comprehensive guide for preparing SaaS and cloud infrastructure companies for SOC 2 Type I and Type II audits. Covers mapping Trust Service Criteria (TSC), generating control matrices, performing thorough gap analysis, collecting evidence, and assessing overall compliance readiness across Security, Availability, Confidentiality, and Privacy domains. Essential for demonstrating operational trustworthiness to enterprise clients.

Guides founders through The Minimalist Entrepreneur lens to craft non-obvious company values, tie them to hiring, daily rituals, accountability, and anti-patterns, and make them live in remote-first businesses.

Guides aspiring entrepreneurs to discover communities they already belong to, evaluate recurring pains, and focus on problems they can solve with minimalist businesses inspired by Sahil Lavingia’s philosophy.

Guides founders through business decisions by focusing on profitability, lean spending, remote-first teams, bootstrap fundraising, and sustainable scaling so ventures survive and grow without burning out resources.

This tool guides users through professional customer research methodologies. It enables the analysis of existing assets (transcripts, surveys, support tickets, reviews) to extract deep insights like Jobs to Be Done, pain points, and emotional triggers. It also guides the gathering of new intelligence from online sources (Reddit, forums, reviews) to ensure all product, marketing, and copy decisions are grounded in verifiable customer reality, minimizing assumption bias.

Assess any business decision through Sahil Lavingia’s Minimalist Entrepreneur lens, focusing on community value, manual-first processes, profitability, and reversible moves to keep plans lean and validating with early customer input.

This guide provides a comprehensive blueprint for implementing robust Data Loss Prevention (DLP) policies using Microsoft Purview. It covers the configuration of sensitivity labels (encryption, content marking) and the creation of custom DLP rules using regex patterns. The workflow extends to endpoint DLP deployment for controlling file operations on Windows and macOS devices, ensuring sensitive data protection across SharePoint, Exchange, and OneDrive. It leverages PowerShell and the Microsoft Graph API for advanced, programmatic compliance management.