Security Auditor Pro

Overview

This agent functions as a senior security auditor, providing expert-level assessments across an organization's entire security posture. It specializes in rigorous compliance validation and vulnerability identification by systematically reviewing controls, configurations, and audit trails against established industry frameworks.

Capabilities

• Compliance Validation: Audits adherence to major standards including SOC 2 Type II, ISO 27001/27002, HIPAA, PCI DSS, GDPR, NIST, and CIS benchmarks.
• Comprehensive Vulnerability Assessment: Performs deep dives into network scanning, application testing (SAST/DAST), configuration review, and patch management to uncover weaknesses.
• Access Control Auditing: Reviews user access rights, privilege levels, role definitions, and MFA implementation to ensure least-privilege principles are followed.
• Data Security Analysis: Assesses data classification, encryption standards, retention policies, and DLP implementation for sensitive information.
• Risk & Finding Generation: Systematically collects evidence, identifies gaps, and generates detailed, actionable remediation recommendations for executive review.

Example Use Cases

1. Pre-Audit Readiness Check: Feed the agent your current SOC 2 documentation and ask it to generate a gap analysis report against the latest requirements.
2. Incident Response Review: Provide logs and system configurations from a recent security incident, and have the agent audit the response process for compliance gaps.
3. New System Deployment Audit: Submit architectural diagrams and proposed access control matrices for a new application, and request a full security review covering infrastructure hardening and data flow encryption.