Plugins

1 plugin

GKE Cost & Multitenancy

For platform engineers optimizing GKE costs and managing multi-tenant clusters with resource isolation.

2 skills · plugin

Results for “tenant-isolation”

18 skills

claude-dev-suite

Security controls for RAG. Indirect prompt-injection via retrieved documents, PII detection/redaction (Microsoft Presidio, AWS Comprehend), multi-tenant isolation, ACL-aware retrieval with row-level/metadata filtering, data-leakage prevention, jailbreak hardening on retrieved context, GDPR right-to-be-forgotten in vector DBs. USE WHEN: user mentions "prompt injection RAG", "indirect prompt injection", "PII redaction", "Presidio", "ACL RAG", "row-level security", "multi-tenant RAG isolation", "GDPR vector DB", "right to be forgotten", "jailbreak", "data leakage RAG" DO NOT USE FOR: hallucination detection - use `rag-guardrails`; tenancy scaling patterns - use `rag-production`; audit tracing schema - use `rag-observability`

More results

Gke Multitenancy

Plans and configures multi-tenancy on GKE, covering namespace isolation, RBAC planning, resource quotas, LimitRanges, network isolation, and cost allocation.

Qdrant Tenant Scaling

Guides scaling Qdrant for multi-tenant workloads using payload partitioning, custom sharding, and tiered multitenancy.

Escaping Containers To Host

Exploit privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during authorized container-security assessments.

24.6k · bundle

Design and build hosted agent infrastructure with sandboxed execution, warm pools, session persistence, and multiplayer collaboration.

16.9k · bundle

Detecting Container Escape Attempts

Detect container escape attempts using runtime security tools like Falco, Sysdig, and custom seccomp/audit rules.

24.6k · bundle

Build secure, isolated code execution environments on Cloudflare Workers using the Sandbox SDK.

Qdrant Scaling Data Volume

Guides scaling decisions for Qdrant vector databases when data volume exceeds single-node capacity, covering tenant scaling, time window rotation, vertical scaling, and horizontal sharding.

Detect container escape attempts using Falco, seccomp, and auditd, with rules for privileged containers, Docker socket access, and kernel module loading.

Implementing AWS Nitro Enclave Security

Builds AWS Nitro Enclave-based confidential computing environments with cryptographic attestation, KMS policy integration, and secure vsock communication for processing sensitive data.

24.6k · bundle

Building Ioc Defanging And Sharing Pipeline

Build an automated pipeline to defang indicators of compromise (URLs, IPs, domains, emails) for safe sharing and distribute them in STIX format through TAXII feeds and threat intelligence platforms.

24.6k · bundle

Configuring Network Segmentation With Vlans

Designs and implements VLAN-based network segmentation on managed switches to isolate network zones, enforce access control between segments, and reduce the attack surface by limiting lateral movement paths in enterprise network environments.

24.6k · bundle

Implementing Conduit Security For Ot Remote Access

Design and deploy IEC 62443-compliant conduit architecture for secure OT remote access, including jump servers, MFA gateways, session recording, and approval-based workflows for vendor and engineer access to industrial control systems.

24.6k · bundle

Detecting Azure Lateral Movement

Detect lateral movement in Azure AD/Entra ID environments using Microsoft Graph API audit logs, Azure Sentinel KQL hunting queries, and sign-in anomaly correlation to identify privilege escalation, token theft, and cross-tenant pivoting.

24.6k · bundle

Git Worktree Manager

Run parallel feature work safely with Git worktrees, standardizing branch isolation, port allocation, environment sync, and cleanup for independent local development.

20.4k · bundle

Implementing Taxii Server With Opentaxii

Deploy and configure an OpenTAXII server to share and consume STIX-formatted cyber threat intelligence using the TAXII 2.1 protocol for automated indicator exchange between organizations.

24.6k · bundle

Detecting OAUTH Token Theft

Detects and responds to OAuth token theft and replay attacks in cloud environments, focusing on Microsoft Entra ID token protection, conditional access policies, and sign-in anomaly detection.

24.6k · bundle

claude-dev-suite

Apache Pulsar cloud-native messaging and streaming. Covers topics, subscriptions, Pulsar Functions, and geo-replication. Use for multi-tenant, geo-distributed messaging systems. USE WHEN: user mentions "pulsar", "bookkeeper", "multi-tenancy", "geo-replication", "pulsar functions", asks about "cloud-native streaming", "tenant isolation", "global messaging" DO NOT USE FOR: simple queues - use `rabbitmq` or `sqs`; AWS-native - use `sqs`; Azure-native - use `azure-service-bus`; GCP-native - use `google-pubsub`; lightweight - use `nats`; JMS - use `activemq`