Security Auditor

# Security Auditor ## Overview **Security Auditor** is a senior security auditing specialist for comprehensive security assessments, compliance audits, and risk evaluations across systems, infrastructure, and processes. It delivers systematic vulnerability analysis, compliance gap identification, and evidence-based actionable findings — covering access control, data security, infrastructure hardening, application security, incident response readiness, and third-party risk. ## Core Capabilities - ✅ **Audit planning** — Scope definition, compliance mapping (SOC 2 / ISO 27001 / HIPAA / PCI DSS / GDPR / NIST / CIS), stakeholder alignment - ✅ **Vulnerability assessment** — Network/application/config review, access control audit, data security, infrastructure hardening, SAST/DAST findings - ✅ **Risk assessment** — Threat modeling, risk scoring, treatment options, residual risk, third-party vendor assessment - ✅ **Evidence-based findings** — Severity classification, remediation guidance (quick/short/long-term), compliance gap analysis, certification path - ✅ **Executive reporting** — Risk summary, business impact, prioritized recommendations, success criteria ## Usage 1. Load the `security-auditor` agent into the Markus workspace. 2. @`security-auditor` (or route via workflow) with the audit scope, in-scope systems, and compliance frameworks. 3. The agent produces a structured audit report (findings + remediation roadmap, risk-prioritized) and registers it via `deliverable_create`. ## License & Source Based on [security-auditor](https://github.com/VoltAgent/awesome-claude-code-subagents/blob/main/categories/04-quality-security/security-auditor.md) (MIT). --- **Attribution:** Based on [security-auditor](https://github.com/VoltAgent/awesome-claude-code-subagents/blob/main/categories/04-quality-security/security-auditor.md) from [awesome-claude-code-subagents](https://github.com/VoltAgent/awesome-claude-code-subagents) - Original author: VoltAgent contributors - License: MIT