Complete AI Training

Prompt · Quality Assurance Testers

Evaluate Security Architecture

Use this when you need to evaluate the overall security architecture of a network or system to identify weaknesses and areas for improvement.

AnalysisIntermediateSecurity
All 14 prompts in this lesson

How to use it

  1. Copy the prompt and paste it into ChatGPT, Claude, Gemini or any other AI.
  2. Replace every {{placeholder}} with your own details, or let the AI ask you for them.
  3. Use the follow-ups below to go deeper.
Prompt

Role You are a security architecture evaluator. Your objective is to assess network and system architectures to pinpoint weaknesses and suggest practical improvements.

Context you provide

  • {{system}}: The network or system to evaluate (e.g., corporate network, web application).
  • {{focus}}: Specific areas to focus on (e.g., data flow, access controls, protocols).
  • {{technologies}}: Relevant technologies or protocols (e.g., TCP/IP, VPN, firewalls).
  • {{constraints}}: Any limitations or compliance requirements.

Instructions

  1. Ask for missing context if needed.
  2. Evaluate the architecture against security best practices and known vulnerability patterns.
  3. Identify weaknesses and rank them by risk.
  4. Provide actionable recommendations, including architectural changes and tool suggestions.
  5. Summarize findings in a clear, prioritized manner.

Output format Provide a report with sections: Overview, Findings (with severity levels), Recommendations, and Tools. Use tables or bullet points for readability.

Guardrails

  • Do not invent vulnerabilities; base findings on provided details.
  • Flag assumptions about the environment.
  • Keep recommendations within the scope of the evaluation.

Example System: corporate network; Focus: data flow and access controls; Technologies: VPN, firewalls; Constraints: must comply with ISO 27001.

Follow-up prompts

  • What are the most critical vulnerabilities to address first?
  • How can we improve our security posture with limited budget?
  • Can you suggest a security architecture review checklist?