Prompt lesson · 23 prompts
Security Audit and Review prompts for Cybersecurity Analysts
23 ready-to-use prompts from our AI for Cybersecurity Analysts course. Copy one, fill in the {{placeholders}}, and paste it into ChatGPT, Claude, Gemini or any other AI.
Vulnerability Assessment and Mitigation
Use this when you need to identify and prioritize vulnerabilities in systems, networks, or applications.
Role You are a cybersecurity vulnerability assessment specialist. Your goal is to help identify, analyze, and prioritize vulnerabilities to strengthen the security posture.
Context you provide
- {{assessment_target}}: The specific system, network, or application to assess.
- {{scan_results}}: (Optional) Any existing vulnerability scan output or logs.
- {{risk_tolerance}}: (Optional) The organization's risk appetite to help prioritize.
Instructions
- If the assessment target is missing, ask for it before proceeding.
- Generate a comprehensive list of potential vulnerabilities relevant to the target.
- For each vulnerability, provide a severity rating (e.g., Critical, High, Medium, Low), a description, potential impact, and recommended mitigation steps.
- Prioritize the vulnerabilities based on severity and exploitability.
- If scan results are provided, analyze them and highlight the most critical issues.
Output format Provide a structured report with sections: Executive Summary, Vulnerability List (each with severity, description, impact, mitigation), and Prioritized Remediation Plan. Use clear, actionable language.
Guardrails
- Do not claim to have performed an actual scan; base analysis on provided data or general knowledge.
- Flag any assumptions about the environment.
- Avoid providing exploit details; focus on mitigation.
Example Assessment target: "our internal web application" with scan results from "Nessus scan output attached".
Open this prompt Analysis · Intermediate
Penetration Test Planning and Reporting
Use this when you need to plan, simulate, or document penetration tests to assess security controls.
Role You are an experienced penetration testing strategist. Your goal is to help plan realistic attack simulations and produce clear, actionable reports that improve security controls.
Context you provide
- {{target_environment}}: The specific network, web application, or system to test.
- {{test_scope}}: (Optional) Boundaries, rules of engagement, or specific areas of focus.
- {{threat_model}}: (Optional) Any known threat actors or attack scenarios to consider.
Instructions
- If the target environment is missing, ask for it before proceeding.
- Based on the target, outline a step-by-step penetration test plan, including techniques, tools, and entry points.
- Prioritize potential attack vectors by likelihood and impact.
- For each vector, describe the potential impact and recommend security controls to mitigate.
- Structure the output as a penetration test report, including an executive summary and technical details.
Output format Provide a structured report with sections: Executive Summary, Test Scope, Attack Scenarios (each with steps, tools, likelihood, impact), Findings, and Recommendations. Use professional, technical language.
Guardrails
- Do not provide actual exploit code or instructions that could be used maliciously; focus on planning and reporting.
- Clearly state that the plan is for authorized testing only.
- Flag any assumptions about the environment or scope.
Example Target environment: "our e-commerce web application" with scope "login and payment processing modules".
Open this prompt Planning · Advanced
Configuration Review for Security
Use this when you need to assess system configurations against security best practices and identify remediation steps.
Open this prompt Analysis · Intermediate
Review Access Control Mechanisms
Use this when you need to assess the effectiveness of access control mechanisms and identify vulnerabilities in user permissions or authentication methods.
Open this prompt Analysis · Intermediate
Review Security Policy for Gaps
Use this when you need to analyze a security policy document for gaps, outdated practices, or missing controls and receive actionable recommendations.
Open this prompt Analysis · Intermediate
Security Policy Review and Gap Analysis
Use this when you need to review your organization's security policies against a standard and identify gaps.
Open this prompt Analysis · Intermediate
Evaluate Incident Response Plan Effectiveness
Use this when you need to review your incident response plan for completeness, clarity, and effectiveness, and identify areas for improvement.
Open this prompt Analysis · Intermediate
Incident Response Plan Review
Use this when you need to evaluate your organization's incident response plan for gaps and recommend improvements based on best practices.
Open this prompt Analysis · Advanced
Analyze Logs for Threat Detection
Use this when you need to automate the analysis of system or network logs to identify suspicious activities and indicators of compromise.
Open this prompt Analysis · Intermediate
Create Security Awareness Training Materials
Use this when you need to develop engaging, realistic security awareness training content for employees.
Open this prompt Creating · Beginner
Assess Physical Security Controls and Recommend Improvements
Use this when you need a comprehensive assessment of your facility's access control, surveillance, and environmental protections, with actionable recommendations.
Open this prompt Analysis · Intermediate
Compliance Audit Analysis
Use this when you need to analyze security policies, regulations, or industry standards for compliance gaps and receive actionable remediation recommendations.
Open this prompt Analysis · Intermediate
Third-Party Vendor Security Assessment
Use this when you need to perform an initial security assessment of a third-party vendor, evaluating their posture, incident response, and encryption practices.
Open this prompt Analysis · Advanced
Security Architecture Review
Use this when you need to evaluate an organization's security architecture, identify vulnerabilities, and get recommendations aligned with industry best practices.
Open this prompt Analysis · Advanced
Data Privacy Review and Compliance
Use this when you need to analyze data handling practices, assess protection mechanisms, and check privacy policies against regulations.
Open this prompt Analysis · Intermediate
Business Continuity and Disaster Recovery Plan Review
Use this when you need to analyze your business continuity or disaster recovery plan, identify gaps, and suggest improvements against emerging threats.
Open this prompt Analysis · Intermediate
Simulate Security Incident Scenarios
Use this when you need to generate realistic security incident scenarios for testing your organization's incident response capabilities.
Open this prompt Creating · Intermediate
Conduct Compliance Audit Review
Use this when you need to review your organization's adherence to a specific regulation or standard, understand key requirements, and identify gaps.
Open this prompt Analysis · Intermediate
Security Awareness Training Evaluation
Use this when you need to critically assess a security awareness training program and get actionable recommendations for improvement.
Open this prompt Analysis · Intermediate
Physical Security Assessment Review
Use this when you need to evaluate and improve physical security controls for a facility.
Open this prompt Analysis · Intermediate
Conduct Cloud Security Audit
Use this when you need to assess cloud provider security controls, data encryption practices, and overall cloud environment vulnerabilities.
Open this prompt Analysis · Advanced
Incident Simulation Review
Use this when you need to evaluate an incident simulation exercise and improve its educational value and response readiness.
Open this prompt Analysis · Intermediate
Conduct Third-Party Security Audit
Use this when you need to evaluate a third-party vendor's security practices, identify risks, and get recommendations for contractual safeguards.
Open this prompt Analysis · Intermediate