blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
4
claude
security-hardening
System hardening and CIS Benchmark assessment for Linux and Windows hosts, containers, Kubernetes, web servers, databases, and cloud accounts, with implementation and verification steps.
/
Plugin security-hardening from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (1)
cis-benchmarksReference CIS Benchmark controls with audit and remediation commands for Linux (Ubuntu and Debian), Docker, Kubernetes, and AWS Foundations, plus hardening automation and a prioritization framework. Use when hardening a system or checking a configuration against CIS controls.
Slash commands (2)
/security-hardening:benchmarkAssess a platform's configuration against its CIS Benchmark and produce a compliance score, critical gaps, and a remediation plan.
/security-hardening:hardenGenerate a hardening checklist and configuration guide for a target platform, with priorities, implementation steps, and post-hardening verification.
Subagents (2)
benchmark-auditorUse this agent when assessing a system against CIS Benchmarks, preparing for an audit that cites CIS controls, or checking drift from a hardened baseline. It produces a pass or fail gap report with evidence, exceptions, and remediation, using tools such as CIS-CAT, OpenSCAP, Lynis, kube-bench, and P
hardening-specialistUse this agent when hardening a Linux or Windows host, container, Kubernetes cluster, web server, database, or cloud account before production or after an audit finding. It gives exact configuration changes with commands and verification (sysctl, SSH, PAM, GPO, seccomp, Pod Security Standards, TLS,
More from HermeticOrmus/LibreSecOps-Claude-Code
All 33 plugins →bug-bounty-methodology
claudeMethodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
4
compliance-frameworks
claudeCompliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
4
container-security
claudeContainer security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
4
devsecops-pipelines
claudeSecurity-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
4
forensics-analysis
claudeDigital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
4
Similar plugins
commands-security-audit
claudeCommands for security auditing and vulnerability scanning
4 commands
davepoon/buildwithclaude 3,741
a2a-client
claudeSecurity-hardened MCP client for Agent2Agent card discovery, messaging, streaming, and confirmation-gated task control
1 MCP server · hooks
jeremylongshore/tons-of-skills-marketplace 2,917
cis-controls
claudeCIS Controls v8 (CIS Top 18) advisor — Implementation Group scoping (IG1/IG2/IG3), gap assessments across all 153 safeguards, asset/software inventory, data protection, secure configuration, MFA and access control, vulnerability management, audit log management, malware defenses, incident response, penetration testing, and CIS Controls mapping to NIST CSF 2.0, ISO 27001:2022, SOC 2, PCI DSS, and CMMC 2.0. Use for any CIS Controls, CIS Benchmarks, or prioritized cyber hygiene question.
1 skill
Sushegaad/Claude-Skills-Governance-Risk-and-Compliance 1,069
prodsec-skills-ge-core
claudeGE Core — 12 curated security skills for developers writing code daily: injection defense, web application security, secrets detection, container hardening, OpenShift/Kubernetes access control, dependency auditing, authentication, secure-by-design, audit logging, and AI security.
12 skills
RedHatProductSecurity/prodsec-skills 57
Enterprise standards and compliance skills: CIS Benchmarks, cloud Well-Architected Framework reviews, SOC2/ISO 27001/PCI-DSS/NIST CSF mapping, and OWASP Top 10 secure coding standards.
4 skills
selvarajmurugesan90/ops-engineering-skills 44
security-audit
claudeFull-stack security audit for Web, Mobile, Backend, IaC, Compliance and LLM/AI: OWASP Top 10:2025, MASVS v2, CIS Benchmarks, PCI-DSS, GDPR. Static analysis plus CLI/SQL configuration checks and Chrome MCP dashboard inspection.
1 skill
toshipon/claude-code-security-audit-skill 11
Maintain security-hardening?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins33 plugins