Reverse proxy
Configure nginx and Traefik as reverse proxies. Implement SSL termination and routing. Use when setting up application gateways.
Skills for your AI
AI skills for IT & software development
Runbook creation
Create operational runbooks and standard operating procedures. Document troubleshooting guides and recovery procedures. Use when documenting operational knowledge.
Saas security posture
Audit and harden your SaaS tool stack
Sast scanning
Perform static application security testing with tools like Semgrep, CodeQL, and SonarQube.
Sbom supply chain
Generate, sign, and verify SBOMs and provenance attestations to secure the software supply chain. Use when implementing SLSA controls, artifact trust policies, or compliance evidence for releases.
Security arsenal
Security payloads, bypass tables, wordlists, gf pattern names, always-rejected bug list, and conditionally-valid-with-chain table.
Security automation
Automate security workflows and remediation. Build security pipelines, automate compliance checks, and implement SOAR capabilities. Use when scaling security operations or implementing DevSecOps.
Semantic versioning
Automate versioning and changelog generation using semantic versioning principles.
Service mesh
Implement Istio and Linkerd service meshes. Configure mTLS, traffic management, and observability. Use when managing microservices communication.
Soc2 compliance
Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.
Sops encryption
Encrypt files and configs with Mozilla SOPS.
Sre dashboards
Design and operationalize SRE dashboards that surface reliability, latency, error, saturation, and capacity signals across services.
Ssh configuration
Configure SSH servers and clients securely. Manage keys, tunnels, and config files. Use when setting up secure remote access.
Ssl tls management
Manage SSL/TLS certificates with Let's Encrypt and internal PKI. Configure secure HTTPS, certificate renewal, and cipher suites. Use when implementing secure communications.
Startup it troubleshooting
Practical IT troubleshooting playbooks for small teams without dedicated IT staff.
Supply chain attack recon
External recon for software supply-chain attack surface
Supply chain attack response
Detect, respond to, and prevent software supply chain attacks on package registries, container images, and CI/CD pipelines with lockfile auditing, provenance verification
Systemd services
Create and manage systemd services and timers. Configure service dependencies and resource limits. Use when managing system services.
Terraform aws
Provision AWS infrastructure with Terraform. Create modules, manage state, and implement IaC best practices. Use when deploying AWS resources declaratively.
Terraform azure
Provision Azure infrastructure with Terraform. Configure providers, manage state, and deploy resources. Use when implementing IaC for Azure.
Terraform gcp
Provision GCP infrastructure with Terraform. Configure providers and deploy Google Cloud resources. Use when implementing IaC for GCP.
Threat modeling
Conduct threat modeling using STRIDE methodology. Identify threats, assess risks, and design security controls. Use when designing secure systems or assessing application security.
Triage validation
Finding validation before writing any report
User management
Manage users, groups, and permissions on Linux systems. Configure sudo and access controls. Use when managing system access.