Results for “industrial-firewall”

Build an automated pipeline to defang indicators of compromise (URLs, IPs, domains, emails) for safe sharing and distribute them in STIX format through TAXII feeds and threat intelligence platforms.

Design and implement security zones and conduits for industrial automation and control systems per IEC 62443-3-2, including zone partitioning, firewall configuration, and validation through traffic analysis and penetration testing.

Build web interfaces that fuse Swiss typographic design with military terminal aesthetics, using rigid grids, extreme type scale contrast, utilitarian color, and analog degradation effects for data-heavy dashboards, portfolios, or editorial sites.

Design and implement network segmentation using firewall security zones, VLANs, ACLs, and microsegmentation policies to restrict lateral movement and enforce least-privilege network access.

Detect cyber attacks targeting OT historian servers (OSIsoft PI, Ignition, Wonderware) that sit at the IT/OT boundary and serve as pivot points for lateral movement between enterprise and control networks, including data manipulation, unauthorized queries, and exploitation of historian-specific vulnerabilities.

Configure and deploy Palo Alto Networks next-generation firewalls with App-ID, User-ID, zone-based policies, SSL decryption, and threat prevention profiles for enterprise network security.

Analyzes and optimizes firewall rules to reduce attack surface while maintaining connectivity

Design and implement network segmentation for industrial control systems using the Purdue Enterprise Reference Architecture model, separating OT and IT networks into hierarchical security zones with strict traffic control.

Firm-fixed-price cost buildup mirroring 1102 IGCE FFP wrap-rate math (BLS OEWS + GSA CALC+ + GSA Per Diem). USE WHEN the user asks to "build an FFP IGCE", "wrap rate buildup", "FFP cost estimate", "layer fringe overhead G&A fee", "how should we price this FFP task order", or "IGCE parity for our bid". Pulls labor categories from pursuit vault or defaults, stacks fringe/overhead/G&A/fee, exports JSON + XLSX to Studio. DO NOT USE FOR T&M/LH pricing (`igce-builder-lh-tm`), cost-reimbursement (`igce-builder-cr`), OT milestones (`ot-prototype-strategist`), or obligation intel (`competitive-intel`).

Design and deploy IEC 62443-compliant conduit architecture for secure OT remote access, including jump servers, MFA gateways, session recording, and approval-based workflows for vendor and engineer access to industrial control systems.

You're a developer who has shipped dozens of Firebase projects. You've seen the "easy" path lead to security breaches, runaway costs, and impossible migrations. You know Firebase is powerful, but you also know its sharp edges.

Applies the Federal Enterprise Architecture Framework to design scalable, maintainable, and interoperable enterprise systems and solutions.

Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they'r...

Operates Laravel applications in production, covering Horizon, queues, scheduler, Octane, Redis, Supervisor, PHP-FPM, cache, and deployment with safety gates for destructive commands.

Master defensive Bash scripting for production automation, CI/CD pipelines, and system utilities. Expert in safe, portable, and testable shell scripts with POSIX compliance, modern Bash 5.x features, and comprehensive error handling. Use when writing shell scripts, bash automation, CI/CD scripts, system utilities, or mentions "bash", "shell script", "automation", "defensive programming", or needs production-grade shell code.

Implements AI safety guardrails including input validation, output filtering, robustness testing, human oversight, and monitoring to prevent harmful outputs and ensure system reliability.

Builds input and output validation guardrails for LLM-powered applications to prevent prompt injection, data leakage, toxic content generation, and hallucinated outputs using NeMo Guardrails, Presidio, and Guardrails AI.

Bypass Web Application Firewall protections using encoding techniques, HTTP method manipulation, parameter pollution, and payload obfuscation to deliver SQL injection, XSS, and other attack payloads past WAF detection rules.

Executes containment strategies to stop active adversary operations and prevent lateral movement during a confirmed security breach, using network segmentation, endpoint isolation, credential revocation, and access control modifications.

Provides guidance on Firebase best practices, including security rules, data modeling, and avoiding common pitfalls.

Designs and implements VLAN-based network segmentation on managed switches to isolate network zones, enforce access control between segments, and reduce the attack surface by limiting lateral movement paths in enterprise network environments.

Guides Firebase development with best practices for security rules, data modeling, and avoiding common pitfalls.

Add safety guardrails to an LLM app — prompt-injection defense, output validation, PII handling, and a clear refusal policy.

Build modern PHP applications with strict typing, PHPStan level 9, Laravel or Symfony, and enterprise patterns including DTOs, DI, and comprehensive testing.

Implements secure remote access architecture for OT/ICS environments with jump servers, MFA, session recording, and privileged access management.

Firecrawl gives agents and pipelines fast, reliable web context with strong search, scraping, and page-interaction tools. Umbrella skill that routes to firecrawl-search, firecrawl-scrape, and firecrawl-research, and documents install, credentials, and the keyless fallback.

Deploy Llama Guard, NeMo Guardrails, and LLM Guard as runtime input/output scanners to block jailbreaks, prompt injection, and toxic content in production LLM applications.

A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.

Build automated threat intelligence enrichment pipelines in Splunk Enterprise Security using lookup tables, modular inputs, and the Threat Intelligence Framework.

Deploy and configure the Dragos Platform for OT network monitoring, leveraging industrial protocol parsers, threat detection analytics, and asset visibility to protect ICS environments.

Guides Firebase development with best practices for security rules, data modeling, and avoiding common pitfalls.

Terraform infrastructure-as-code workflow patterns: state and environments, module design, safe plan/apply, drift control, and CI guardrails

Utilize Windows Management Instrumentation (WMI) to execute malicious payloads, establish lateral movement, and execute commands stealthily across an Active Directory environment without dropping binaries to disk or relying on traditional Service Creation (PsExec) mechanics.

Firebase gives you a complete backend in minutes - auth, database, storage, functions, hosting. But the ease of setup hides real complexity. Security rules are your last line of defense, and they'r...