Skill UI

Guides implementing Kubernetes NetworkPolicy, RBAC, PodSecurityPolicy, Pod Security Standards, and OPA Gatekeeper constraints to enforce defense-in-depth across clusters, covering multi-tenant protection, admission control, and Istio service mesh policies.

This specialized, end-to-end workflow guides the deployment of applications onto Kubernetes clusters. It systematically covers all critical production phases, including Docker container preparation, generating K8s manifests, structuring applications with Helm charts, configuring advanced service meshes (like Istio), enforcing robust security policies (RBAC, NetworkPolicy), and implementing full observability and GitOps pipelines for reliable, scalable deployments.

Guides Kubernetes operators through workload design, manifest generation, security hardening, networking, storage, GitOps, and multi-cluster operations while ensuring probes, resource limits, and least-privilege policies.

Helps Claude manage Kubernetes network policies and firewall rules by generating or updating YAML configurations based on infrastructure needs, ensuring secure pod-to-pod communication and compliance with least-privilege principles.

This skill provides comprehensive guidance on achieving PCI DSS (Payment Card Industry Data Security Standard) compliance. It covers best practices for designing, implementing, and auditing secure payment processing systems, including network protection, data encryption, tokenization, and adhering to strict data minimization policies.

Provides a comprehensive guide to configuring pfSense firewall rules, NAT policies, and VPN tunnels. It details best practices for enforcing network segmentation (DMZ, LAN, Guest, IOT), controlling traffic flow, and protecting internal network zones in SMB and enterprise environments. Covers VLAN setup, DHCP/DNS management, and granular access control.

This skill provides comprehensive guidance and PowerShell scripts for hardening Windows endpoints using Microsoft Defender for Endpoint (MDE). It covers advanced features like Attack Surface Reduction (ASR) rules to block common attack techniques, Controlled Folder Access for ransomware protection, and Network Protection. Use this for deploying enterprise-grade, compliance-required security policies via Intune or Group Policy.

This guide details the process of implementing Zscaler Private Access (ZPA) to replace legacy VPNs with a modern Zero Trust Network Access (ZTNA) framework. It covers deploying App Connectors, defining application segments, and establishing granular access policies based on user identity, organizational user groups, and detailed device posture checks (e.g., compliance, anti-malware status).

This comprehensive guide details how to implement a Zero Trust Network Access (ZTNA) solution using Cloudflare Access and Cloudflare Tunnel. It provides a secure alternative to traditional VPNs by offering identity-aware, policy-driven access to self-hosted and private applications. The process covers setting up tunnels, integrating major Identity Providers (Okta, Azure AD), and enforcing granular access policies.

This guide details the comprehensive deployment of Palo Alto Networks Prisma Access for implementing a modern SASE-based Zero Trust Network Access (ZTNA). It covers configuring the cloud infrastructure, deploying ZTNA Connectors, defining granular application policies, enforcing device posture via Host Information Profile (HIP), and utilizing GlobalProtect agents for secure, enterprise-grade remote access.

This skill focuses on advanced threat detection techniques used to identify the abuse of legitimate Windows binaries (LOLBins) for malicious purposes. It requires monitoring process creation, command-line arguments, and network activity to pinpoint fileless and living-off-the-land attacks. Ideal for building SIEM/EDR detection rules, threat hunting, and hardening endpoint security policies.

This skill provides comprehensive guidance on implementing robust network security controls in Kubernetes using Calico's CNI capabilities. Learn to define and audit NetworkPolicy and GlobalNetworkPolicy resources to achieve zero-trust microsegmentation, restrict egress traffic, and control all pod-to-pod communications, ensuring compliance and enhanced security posture.