ciso-review
alirezarezvani/claude-skills
This tool simulates a 'risk-paranoid' interrogation, forcing comprehensive security and compliance checks before deploying any system that handles sensitive data (PII, PHI, cardholder data). It covers six critical areas: Threat Modeling (STRIDE), Blast Radius quantification, Detection capabilities (MTTD), Incident Response readiness, Regulatory compliance windows (GDPR, HIPAA), and Third-party vendor security posture. Use this gate check before major architectural changes or production releases.