Skill UI

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

A comprehensive guide for deploying complex integrations to production cloud environments (GCP, Kubernetes). This skill covers best practices including creating multi-stage Dockerfiles, implementing robust health and readiness checks, and utilizing cloud tools like gcloud and kubectl for seamless, secure deployment with secret management.

A comprehensive guide to implementing Google's BeyondCorp zero trust access model. This solution enforces identity- and device-aware access control using Cloud IAP and Access Context Manager, effectively replacing traditional VPN infrastructure. Use this to secure remote and hybrid access to GCP-hosted or on-prem applications by requiring granular device posture checks and strong user authentication.

This guide teaches how to implement and audit Google Cloud Platform (GCP) VPC firewall rules using gcloud. It covers creating restrictive ingress and egress rules, enforcing network segmentation using tags and service accounts, and auditing for overly permissive settings. Ideal for compliance, zero-trust architectures, and responding to security findings.

This skill provides a comprehensive framework for performing authorized penetration testing on Google Cloud Platform (GCP). It uses specialized tools like GCPBucketBrute to enumerate publicly accessible storage buckets and audits IAM policies to identify overly permissive role bindings. The process includes checking service account keys and mapping potential privilege escalation paths, generating actionable, risk-scored reports for robust cloud security posture management.

Perform comprehensive security assessments for Google Cloud Platform environments. This tool audits critical security components—including IAM policies, firewall rules, and storage permissions—against industry benchmarks like the CIS GCP Foundations Benchmark. It helps organizations establish secure baselines and ensure continuous compliance across multiple GCP projects.

This integration facilitates the deployment of Hex orchestration services to major cloud platforms like Vercel, Google Cloud Run, and Fly.io. It is essential for setting up production environments, managing platform-specific secrets (like API tokens), and automating deployment pipelines for Hex-powered applications.

This guide details how to implement Identity-Aware Proxy (IAP) using gcloud. It enforces per-request identity verification and context-aware access policies (e.g., device posture, location) across major GCP backends, including Compute Engine, App Engine, Cloud Run, and GKE. It is essential for migrating from traditional VPN access to a robust, zero-trust, identity-based security architecture for cloud applications.