Anthropic Managed Agentclaude-opus-4-6Free to use · Download to own

Security Auditor

An open-source Anthropic Agent that conducts security audits, compliance gap analysis, and risk evaluations. Try it live below — then download the YAML to run it against your own codebase, infrastructure configs, and policy docs with full file-system access.

Findings:CriticalHighMediumLowObservation

Domains:ACAccess ControlDSData SecurityIHInfrastructureASApplication SecurityIRIncident ResponseTPThird-Party Risk

Describe your system or try a sample:

security-auditor · live demo · gemini-powered

Describe your infrastructure, system, or compliance scenario

The auditor will return a structured report with findings and remediation

Cmd+Enter to send

Sample audit output

security-auditor · sample outputDEMO

Executive Summary

52 / 100

High Risk Posture

1 Critical

2 High

3 Medium

4 Low

The assessed environment presents critical identity and data protection gaps that expose the organization to regulatory penalties and breach risk. Immediate remediation of MFA enforcement and S3 access controls is required before any compliance certification pursuit.

Critical

MFA Not Enforced on 12 IAM Admin Accounts

Domain: Access Control

Impact · Full AWS account takeover in a single credential compromise. Estimated blast radius: $2.4M+.

Fix · Enable MFA for all IAM users via aws iam enable-mfa-device. Block console access without MFA using SCP. ETA: 48 hours.

High

4 S3 Buckets with PII Publicly Accessible

Domain: Data Security

Impact · HIPAA and GDPR breach exposure. Regulatory fines up to $1.9M/yr (HIPAA) + 4% annual revenue (GDPR).

Fix · Apply s3:BlockPublicAccess at account level, enable server-side encryption (SSE-S3 or KMS), add bucket policies. ETA: 4 hours.

Medium

No CloudTrail Logging in 3 Regions

Domain: Infrastructure

Impact · Blind spots in audit trail. Unable to reconstruct incident timeline or meet SOC 2 CC7.2 log retention requirements.

Fix · Enable CloudTrail multi-region trail with S3 delivery and CloudWatch Logs integration. Apply log file validation. ETA: 2 hours.

Full audit includes remediation roadmap table, timeline, and owner assignments