The All-in-One AI Plugin for Information Security Analysts

Skills for information security analysts 17

• analyst risk mitigation companionWalks a scan finding from open port to a prioritized fix plan with owner, due date, and business impact.
• cybersecurity threat analystTurns authentication logs into a threat report, for example failed logins from one IP across three sites.
• security threat identifierSpots threats in a sample or network capture, such as beaconing traffic to a new command-and-control domain.
• security policy development assistantDrafts or reviews a policy against a standard, for example an access control policy mapped to ISO 27001.
• security risk assessment plannerBuilds risk registers and control assessments across systems and vendors, like scoring a payroll vendor as high risk.
• policy compliance draftingDrafts policy and gap analysis for compliance, for example GDPR data retention clauses your records policy misses.

Plus a start-here assistant, the prompt library and the app builder, and for members the daily brief.

Ready-made prompts 249

• Security Policy Development19 prompts, like Access Control Policy Development
• Threat Intelligence Gathering17 prompts, like Adversary Emulation Planning
• Risk Assessment7 prompts, like Analyze Security Risks
• Incident Response Planning19 prompts, like Step-by-Step Incident Response Plan
• Security Audit Support14 prompts, like Analyze Security Incidents for Trends
• Penetration Testing Assistance17 prompts, like Automate Vulnerability Assessments
• Training and Awareness Programs17 prompts, like Data Protection Training Module

Apps you can build with AI 3

• Multi-framework compliance evidence and certification workspaceKeeps audit evidence tied to its source so SOC 2 and ISO requests do not rebuild the same proof twice. Demo included.
• Source-linked AI use governance consoleGives you a defensible record of where AI tools are used and what data they touch, ready for review. Demo included.
• Evidence-backed application vulnerability validation workbenchCuts false positives by tying each vulnerability finding to proof, so triage and sign-off hold up. Demo included.

AI agents 12

In the download. An agent runs a whole recurring task for you, step by step, and asks you before anything important. Ask your AI: "Run the Government Data Publication Preflight Agent". Each one also has a guided set-up with sample data on its page.

• Government Data Publication Preflight AgentDatasets that are valid and safe to publish.
• Endpoint Compliance Drift AgentDevices back in compliance, with stragglers identified and escalated
• Cloud Security Group Review AgentCloud network rules limited to what is needed, with each change tested
• Data Request Privacy Review AgentExtracts that contain only what the purpose needs and cannot easily identify a person
• Permission and Privacy Label Check AgentMake the declared data use match what the app actually does
• Data Flow Privacy Review AgentHave every new feature's personal data flows mapped and checked before launch
• IT Policy Annual Review AgentEach policy reviewed against real configurations and frameworks, with a clean draft ready for sign-off
• Vulnerability Remediation Tracking AgentEvery important vulnerability fixed within policy deadlines and verified by rescan
• Phishing Report Triage AgentEvery reported email classified, and malicious copies found and contained
• Threat Intelligence Relevance Brief AgentA short weekly brief of threats that actually apply to your environment, with checks done
• Third-Party Security Review AgentA documented risk rating for each new vendor based on checked evidence
• Incident Postmortem Action Tracking AgentEvery postmortem action completed and verified

Connections (MCP servers) 12

A guide in the download. A connection lets your AI work in an app you already use. You add only the ones you use: ask your AI "Which apps can you connect to?" and follow the steps on each connection's page.

• Panther MCP serverAsk your AI to search Panther security logs, check alerts, and review detections in plain English. Official.
• Patch Tuesday MCP serverAsk your AI about Microsoft's monthly security updates, CVEs, KB fixes and what to patch first. No install needed.
• WRG Sigma Rules MCP serverDraft, check and convert Sigma detection rules into Splunk, Elastic, Kibana or Wazuh queries from your chat.
• VirusTotal MCP serverLets your AI check links, files, IP addresses and domains for signs of malware or scams.
• Shodan MCP serverLets your AI look up IP addresses, devices, DNS records and known security flaws using Shodan.
• Wireshark MCP serverAsk your AI to read a network capture file and explain what happened inside it.
• RSigma MCP serverLet your AI help write, check and test Sigma security detection rules. Official.
• Wazuh MCP serverAsk your AI about your Wazuh security alerts, agents, and vulnerabilities in plain language.
• TheHive MCP serverLets your AI read security alerts and cases in TheHive, and create or promote cases for you.
• Cortex MCP serverLets your AI check suspicious IPs, links, and files using your Cortex security tool.
• MISP MCP serverLets your AI look up threat intel in MISP, like events, tags and indicators, safely.
• AWS IAM Analysis MCP serverAsk your AI to list your AWS users and roles and show who can do what.

Your Grok Bot team 12

• Analyst Risk Mitigation CompanionGuides cybersecurity analysts through risk assessment, mitigation, and compliance tasks.
• Cybersecurity Threat AnalystCybersecurity threat analysis and defense planning for network administrators.
• Security Threat IdentifierProactive threat detection and security operations support for cybersecurity analysts.
• Security Policy Development AssistantDrafts, reviews, and aligns your organization's security policies with regulations and best practices.
• Security Risk Assessment PlannerRisk assessment and mitigation assistant for Chief Sales Officers, turning security data into actionable plans and reports. No hype, just the work.
• Policy Compliance DraftingDevelops and maintains your organization's security policies, from risk assessment to incident response.
• Threat Intelligence AnalystGathers, analyzes, and prioritizes cyber threat intelligence for your organization's defense.
• Systems Analyst Security AssistantSecurity assessment assistant for systems analysts covering scans, reviews, and response planning. No hype, no emoji.
• Incident Response Plan AssistantIncident response assistant for IT managers: detect, analyze, document, and improve your response plan.
• Security Audit and Review AssistantGuides security audits and reviews from scoping to reporting.
• Security Architecture Consulting AssistantGuides security architecture consulting: risk, policy, compliance, design, and incident response.
• IR Plan Builder for Security TeamsBuilds and maintains your incident response plan with threat analysis, training, and testing support.