Security for Claude Code

AI ethics and responsible AI development specialist. Use when reviewing an AI system for bias, fairness violations, or regulatory compliance gaps; when generating a model card, algorithmic impact assessment, or ethics review document; or when an AI feature touches a protected class or high-stakes domain (hiring, healthcare, credit, law enforcement).

Expert API architect for designing and implementing REST and GraphQL APIs with production-grade resilience, security, and versioning. Use this agent when you need to: design a GraphQL schema with federation for a new microservice, build a resilient REST client with circuit breaker and bulkhead patterns, choose between REST/GraphQL/gRPC for a new service, or implement secure API authentication and rate limiting. <example> <user_request>Design a GraphQL API for an e-commerce catalog service with p

API security audit specialist. Use PROACTIVELY for REST API security audits, authentication vulnerabilities, authorization flaws, injection attacks, and compliance validation.

Provide expert Azure Principal Architect guidance using Azure Well-Architected Framework principles and Microsoft best practices.

Use this agent when building smart contracts, DApps, and blockchain protocols that require expertise in Solidity, gas optimization, security auditing, and Web3 integration. Specifically:\n\n<example>\nContext: A team is building a DeFi protocol and needs to implement smart contracts for an AMM with liquidity pools, yield farming, and governance tokens.\nuser: \"We need to build an AMM protocol similar to Uniswap. Requirements: ERC20 token support, liquidity pool management, automated market make

Use this agent when you need to design, evaluate, or optimize cloud infrastructure architecture at scale. Invoke when designing multi-cloud strategies, planning cloud migrations, implementing disaster recovery, optimizing cloud costs, or ensuring security/compliance across cloud platforms. Specifically:\\n\\n<example>\\nContext: A company is planning to migrate their monolithic on-premises application to the cloud and needs architectural guidance.\\nuser: \"We're moving from on-premises to AWS.

Use this agent when you need to conduct comprehensive code reviews focusing on code quality, security vulnerabilities, and best practices. Specifically:\\n\\n<example>\\nContext: Developer has submitted a pull request with changes to critical authentication logic in a TypeScript backend service.\\nuser: \"Can you review this PR that refactors our authentication system? We need to catch any security issues, performance problems, or maintainability concerns.\"\\nassistant: \"I'll conduct a thoroug

Use this agent when you need to achieve regulatory compliance, implement compliance controls, or prepare for audits across frameworks like GDPR, HIPAA, PCI DSS, SOC 2, and ISO standards. Specifically:\\n\\n<example>\\nContext: A healthcare organization is building a patient data management system and needs to ensure HIPAA compliance before deployment.\\nuser: \"We're developing a patient records system. What HIPAA controls do we need? How do we prove compliance to auditors?\"\\nassistant: \"I'll

Security compliance and regulatory framework specialist. Use PROACTIVELY for compliance assessments, regulatory requirements, audit preparation, and governance implementation.

Use this agent when you need to audit dependencies for vulnerabilities, resolve version conflicts, optimize bundle sizes, or implement automated dependency updates. Specifically:\\n\\n<example>\\nContext: A project has accumulated security vulnerabilities in its dependency tree that need immediate remediation.\\nuser: \"We have 12 high-severity CVEs in our dependencies. Can you help fix them?\"\\nassistant: \"I'll use the dependency-manager agent to scan all vulnerabilities, assess their impact,

Use this agent to manage project dependencies. Specializes in dependency analysis, vulnerability scanning, and license compliance. Examples: <example>Context: A user wants to update all project dependencies. user: 'Please update all the dependencies in this project.' assistant: 'I will use the dependency-manager agent to safely update all dependencies and check for vulnerabilities.' <commentary>The dependency-manager is the right tool for dependency updates and analysis.</commentary></example> <

Use this agent when working on legacy .NET Framework 4.8 enterprise applications that require maintenance, modernization, or integration with Windows-based infrastructure. Specifically:\\n\\n<example>\\nContext: User has a legacy ASP.NET Web Forms application running on .NET Framework 4.8 that needs security updates and performance optimization.\\nuser: \"We have a 10-year-old Web Forms application with ViewState bloat and some outdated security patterns. How can we modernize it without a comple

Expert assistant for Drupal development, architecture, and best practices using PHP 8.3+ and modern Drupal patterns

The Dynatrace Expert Agent integrates observability and security capabilities directly into GitHub workflows, enabling development teams to investigate incidents, validate deployments, triage errors, detect performance regressions, validate releases, and manage security vulnerabilities by autonomously analysing traces, logs, and Dynatrace findings. This enables targeted and precise remediation of identified issues directly within the repository.

Our expert AI assistant for debugging code (O11y), optimizing vector search (RAG), and remediating security threats using live Elastic data.

Use this agent when building Electron desktop applications that require native OS integration, cross-platform distribution, security hardening, and performance optimization. Use electron-pro for complete desktop app development from architecture to signed, distributable installers. Specifically:\\n\\n<example>\\nContext: A team is building a professional desktop productivity app for Windows, macOS, and Linux with auto-updates and system tray integration.\\nuser: \"We need to build a desktop note

Use when building payment systems, financial integrations, or compliance-heavy financial applications that require secure transaction processing, regulatory adherence, and high transaction accuracy. Specifically:\\n\\n<example>\\nContext: Building a new payment gateway that handles credit card processing with PCI DSS compliance requirements.\\nuser: \"We need to build a payment processing system that handles 10k transactions per second with multiple payment methods. It needs PCI DSS Level 1 cert

GitHub Actions specialist focused on secure CI/CD workflows, action pinning, OIDC authentication, permissions least privilege, and supply-chain security

GraphQL API security and authorization specialist. Use PROACTIVELY for GraphQL security audits, authorization implementation, query validation, and protection against GraphQL-specific attacks. <example> <user_request>Audit our GraphQL API before launch — we're worried about DoS attacks and data leaks through introspection.</user_request> <commentary>The agent will assess query depth/complexity limits, alias/batching overload protection, introspection exposure, CSRF on the GraphQL endpoint, and r

Use this agent when an active security breach, service outage, or operational incident requires immediate response, evidence preservation, and coordinated recovery. Specifically:\\n\\n<example>\\nContext: Your production database has gone offline and customers are experiencing service failures.\\nuser: \"Our database is down and affecting all users. We need to respond immediately.\"\\nassistant: \"I'll activate the incident-responder agent to manage this service outage - we'll assess severity, m

The dedicated Application Security agent for automated security remediation. Verifies package and version compliance, and suggests vulnerability fixes using JFrog security intelligence.

Use this agent when you need to design, deploy, configure, or troubleshoot Kubernetes clusters and workloads in production environments. Specifically:\\n\\n<example>\\nContext: Your team needs to set up a production Kubernetes cluster with high availability, security hardening, and auto-scaling capabilities.\\nuser: \"We're migrating our microservices to Kubernetes. Can you design a production-grade cluster architecture with security best practices and performance optimization?\"\\nassistant: \"

Use this agent when you need to red-team a Large Language Model deployment — jailbreak probes, prompt injection harness design, output-safety evaluation, and robustness evidence for EU AI Act Article 15 or NIST AI RMF MEASURE-2.7. Covers cloud-hosted models and on-prem / air-gapped local models (Ollama, vLLM, llama.cpp). Specifically:\\n\\n<example>\\nContext: A healthcare vendor embeds an LLM in a clinical triage tool and the compliance team wants a red-team report before rollout.\\nuser: \"We'

MCP server deployment and operations specialist. Use PROACTIVELY for containerization, Kubernetes deployments, autoscaling, monitoring, security hardening, and production operations.

MCP server security specialist. Use PROACTIVELY for security reviews, OAuth implementation, RBAC design, compliance frameworks, and vulnerability assessment.

Work with Microsoft SQL Server databases using the MS SQL extension.

Neon Auth implementation specialist. Use PROACTIVELY for Stack Auth integration, user management setup, authentication flows, and security best practices with Neon database.

Use this agent when designing, optimizing, or troubleshooting cloud and hybrid network infrastructures, or when addressing network security, performance, or reliability challenges. Specifically:\\n\\n<example>\\nContext: User needs to design a multi-region network for a global application with strict latency and availability requirements.\\nuser: \"We need to design a network that connects our 5 regional data centers with sub-50ms latency and 99.99% uptime. What should the architecture look like

Payment systems integration specialist. Use PROACTIVELY for Stripe, PayPal, and payment processor implementations, checkout flows, subscription billing, webhook handling, and PCI compliance.

Use this agent when implementing payment systems, integrating payment gateways, or handling financial transactions that require PCI compliance, fraud prevention, and secure transaction processing. Specifically:\\n\\n<example>\\nContext: An e-commerce platform needs to integrate a payment gateway to accept credit cards, manage subscriptions, and handle refunds with PCI compliance.\\nuser: \"We need to integrate Stripe for payments. We have subscription tiers, need to handle refunds, and must be P

Use this agent when you need to conduct authorized security penetration tests to identify real vulnerabilities through active exploitation and validation. Use penetration-tester for offensive security testing, vulnerability exploitation, and hands-on risk demonstration. Specifically:\\n\\n<example>\\nContext: Organization has approved a comprehensive penetration test of their web application and infrastructure before a major product launch.\\nuser: \"We need a full penetration test of our web ap

SRE-focused Kubernetes specialist prioritizing reliability, safe rollouts/rollbacks, security defaults, and operational verification for production-grade deployments

Use this agent when you need to harden PowerShell automation, secure remoting configuration, enforce least-privilege design, or align scripts with enterprise security baselines and compliance frameworks. Specifically:\\n\\n<example>\\nContext: User needs to review a PowerShell script that connects to servers using hardcoded credentials.\\nuser: \"This script uses embedded admin passwords to connect to remote servers. Can you help secure it?\"\\nassistant: \"I'll use the powershell-security-harde

Use this agent when you need a security audit that is guaranteed to make no changes to the codebase. This agent has hooks in its frontmatter that block all Write, Edit, and Bash tool calls for the duration of the audit — enforcing read-only mode at the hook level, not just by convention. Invoke for compliance reviews, pre-merge audits, or any situation where auditability and non-interference are required.\n\n<example>\nContext: A compliance officer needs a security review of payment processing c

Responsible AI specialist ensuring AI works for everyone through bias prevention, accessibility compliance, ethical development, and inclusive design

Security-focused code review specialist with OWASP Top 10, Zero Trust, LLM security, and enterprise security standards

System architecture review specialist with Well-Architected frameworks, design validation, and scalability analysis for AI and distributed systems

Use this agent when conducting comprehensive security audits, compliance assessments, or risk evaluations across systems, infrastructure, and processes. Invoke when you need systematic vulnerability analysis, compliance gap identification, or evidence-based security findings. Specifically:\\n\\n<example>\\nContext: An organization requires a comprehensive security audit to validate SOC 2 compliance before their annual certification review.\\nuser: \"We need a complete security audit covering all

Use this agent when implementing comprehensive security solutions across infrastructure, building automated security controls into CI/CD pipelines, or establishing compliance and vulnerability management programs. Invoke for threat modeling, zero-trust architecture design, security automation implementation, and shifting security left into development workflows. Specifically:\\n\\n<example>\\nContext: A development team is moving to microservices on Kubernetes and needs to implement security acr