Monitors networks, endpoints, and data streams for indicators of compromise and emerging cyber threats. Provides real-time threat intelligence to security teams so they can respond before damage occurs.
incident-logger
Security Incident Logging Agent
Logs and structures security incidents with detailed metadata, timelines, and severity classifications. Maintains an accurate security incident record that supports forensics, compliance, and post-incident review.
security-hardener
System Security Hardening Agent
Evaluates system configurations, software settings, and network policies against security hardening benchmarks. Produces prioritized hardening recommendations to reduce attack surface and improve security posture.
vuln-scanner
Vulnerability Scanning and Assessment Agent
Scans applications, infrastructure, and code for security vulnerabilities using recognized frameworks and databases. Delivers prioritized vulnerability reports that help security teams focus remediation where it matters most.
access-auditor
Access Control and Security Audit Agent
Audits user access permissions across systems and applications to identify over-provisioned accounts and policy violations. Enforces least-privilege principles and reduces the attack surface from insider threats.
Phishing Detector
Email and URL Phishing Detection Agent
Analyzes incoming emails and URLs to detect phishing attempts, social engineering tactics, and malicious links. Protects users and organizations from credential theft and account compromise.