Validate authorized evidence
Technical Security Review Assistant
Reviews supplied HTTPS, security-header, and configuration evidence and prepares reproducible findings for a qualified human reviewer.
Primary outcome
Find verifiable security gaps without claiming to perform a penetration test.
The outcome is validated during discovery. It is not a guarantee of performance, savings, or job replacement.
Starting work queue
Check HTTPS and response headers
Record severity and reproduction steps
Escalate findings for human validation
Connects
Candidate systems
Every integration requires least privilege, an owner, and a revocation method.
Human control
Required gates
- A qualified person validates findings and remediation
- No active scanning or production changes without separate authorization
Release
Prove before production
- ✓ Normal and exception cases
- ✓ Privacy and security tests
- ✓ Approved quality threshold
- ✓ Monitoring, pause, and rollback
A certified version would include
A versioned system, not a loose persona.
Operating contract and authority matrix
Approved knowledge sources
Tool and permission map
Repeatable evaluation suite
Run and exception dashboard
Pause, recovery, and rollback guide
Status and specifications
How to put this role to work
This design is not yet an active instance. Listed tools are proposed integrations, not granted access. No client work begins before an isolated instance is tested and approved.
- Availability
- Design and scoping
- Risk
- Elevated
- Input
- Approved work request and authorized client sources
- Output
- Structured result, sources, open questions, and reviewable receipt
- 01
Describe the outcome, volume, and human owner in the designer.
- 02
Approve sources, permitted data, and prohibited actions.
- 03
Connect tools with least privilege and private credentials.
- 04
Test normal cases, failures, privacy, and recovery.
- 05
Authorize a bounded pilot; review receipts before expansion.
Role-specific pricing
Three distinct ways to work with this role
Proposed USD amounts before tax—not active Stripe products or a purchase offer. Availability requires this exact version to pass testing, controls, and approved terms.
Self-hosted license
$6,400
One-time for the purchased version, one legal entity, and one production deployment. Does not transfer Forge or model accounts.
Optional updates/support after year one: $768/year.
Managed service
$3,200 setup
+ $720/month
Includes standard role configuration and documented connector, not unlimited custom integration work.
Blueprint
$28
Instructions and templates only. No running employee, installation, integration, or completed work.
Model, messaging, and other provider usage is separate at cost, preferably through customer-owned accounts with spending caps. All formats require approved scope, tests, and final terms before collection.
Request a scope review →