Azure compliance scanning, Key Vault expiration auditing, and resource configuration validation. Runs azqr (Azure Quick Review) for comprehensive compliance assessment against best practices across subscriptions and resource groups Monitors Key Vault keys, secrets, and certificates for expiration dates and identifies items without expiration policies Detects orphaned, misconfigured, and non-compliant resources using Resource Graph queries Classifies findings by priority (Critical, High, Medium, Low) with remediation guidance for each issue

Assess and improve Azure Functions and App Service reliability through zone redundancy, storage replication, health probes, and multi-region failover. Scans deployed resources for zone redundancy on compute, zone-redundant storage (ZRS/GZRS), health probes, and multi-region failover configuration Presents findings as a feature-pivoted checklist, then guides staged remediation via Azure CLI commands or IaC patches (Bicep/Terraform) with user confirmation at each step Supports two fix paths: immediate CLI changes against live resources, or persistent IaC updates with automatic deployment via azd up or terraform apply Handles storage migration separately (live conversion from LRS/GRS to ZRS) with polling and two-deploy flow to keep IaC in sync Multi-region setup (secondary region + Front Door) only offered after core single-region reliability is complete; requires explicit user consent before any deployment

Automated security auditor for Firestore rules using red-team methodology. Evaluates rules against a mandatory checklist covering update bypasses, authority sources, business logic alignment, resource exhaustion, and type safety Identifies vulnerabilities across six critical dimensions: privilege escalation, data integrity, PII exposure, validation inconsistencies, and access control gaps Scores findings on a 1–5 scale (critical to secure) with detailed recommendations for each issue discovered Includes special handling for admin bootstrapping patterns to avoid false positives on legitimate hardcoded admin email checks

Security best practices and vulnerability prevention for Golang. Covers injection (SQL, command, XSS), cryptography, filesystem safety, network security,…