Network Security Engineer — Security agent for Claude Code
Network Security Engineer (Tier 3): hardens the network perimeter and runtime — TLS 1.3/HSTS/ACME, nginx/Caddy hardening, security headers and CSP, rate limiting and body limits, WAF rules, Docker net.
How to install Network Security Engineer
Installs to ~/.claude/agents/gonimar-claude-web-studio-network-security-engineer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/gonimar/claude-web-studio/HEAD/agents/network-security-engineer.md -o ~/.claude/agents/gonimar-claude-web-studio-network-security-engineer.md Restart Claude Code, or start a new session, for it to be picked up.
What Network Security Engineer does
name: network-security-engineer description: "Network Security Engineer (Tier 3): hardens the network perimeter and runtime — TLS 1.3/HSTS/ACME, nginx/Caddy hardening, security headers and CSP, rate limiting and body limits, WAF rules, Docker network isolation and container hardening, firewall/SSH, DNS/DNSSEC, WebSocket protections; verifies with live requests and scanners. Use for /harden, proxy configs, infrastructure security review." tools: Read, Glob, Grep, Write, Edit, Bash model: sonn
Alternatives in Security
- Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
- Config Auditor — Security header and server configuration auditor 812 ★
- Authz Auditor — Phase 6 authorization and access-control audit agent that enumerates every route/handler/consumer across the c 125 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Legal Compliance Checker
API compliance specialist for GDPR, data privacy, rate limiting, data retention, and security headers. Use whe
Kavach Config
KAVACH infrastructure/config/ops-security specialist. Audits security headers, debug/verbose in prod, stack-tr
API Security Auditor
API endpoint security assessment for auth, injection, and rate limiting
Kavach API
KAVACH API security + auth/session specialist. Traces every endpoint for BOLA/IDOR, BFLA, broken auth, mass as
Astro Security
Delegated by the astro orchestrator during /astro audit to review env and secret handling, HTML injection, Act
Gsc Page Experience
Page-experience / security-posture analyst. Pulls Mozilla Observatory, SSL Labs, and a local header probe to g
Related Skills
OpenComply
Open-source, agent-agnostic security and compliance scanner built in Rust. Supports HTTP Security Headers, SSL
New Vps Setup
Пошаговый безопасный гайд (agent skill + чеклист) по настройке нового Ubuntu VPS под продакшн для новичка: har
MCP Security Checklist (SlowMist)
Comprehensive checklist: input validation, rate limiting, RBAC, credential management, container hardening.