soc2 plugins

by Claude Code Plugins

Check infrastructure compliance (SOC2, HIPAA, PCI-DSS)

by Jeremy Longshore

Professional security tools for Claude Code: vulnerability scanning, compliance, cryptography audit, container & API security

by Claude Code Plugins

Check infrastructure compliance (SOC2, HIPAA, PCI-DSS)

by Jeremy Longshore

Professional security tools for Claude Code: vulnerability scanning, compliance, cryptography audit, container & API security

by Claude Code Plugins

Check infrastructure compliance (SOC2, HIPAA, PCI-DSS)

by Jeremy Longshore

Professional security tools for Claude Code: vulnerability scanning, compliance, cryptography audit, container & API security

by Matt Corbett

Cybersecurity governance, risk & compliance (GRC) team — agents (grc-architect, control-and-evidence-engineer, audit-and-third-party-risk-lead) for the security-compliance program layer: framework selection & scoping (SOC 2 TSC, ISO 27001 + Annex A, NIST CSF 2.0, NIST 800-53), the ISMS, control crosswalk across frameworks, the Statement of Applicability; control implementation & operating effectiveness, policy authoring, evidence collection & continuous control monitoring, Type I vs Type II readiness; audit readiness, gap assessments, and vendor/third-party risk (TPRM tiering, SIG/CAIQ, shared-responsibility, monitoring). Decision-tree bank (Mermaid trees), best-practices, skills, commands, templates, a hook, a grc_calc.py risk/coverage/readiness calculator, scenarios. Seams: AppSec -> security-engineering; financial-regulator -> regulatory-compliance; privacy mechanics -> data-governance-privacy; cloud config -> aws/azure/gcp-cloud. Requires ravenclaude-core@>=0.7.0.

by Matt Corbett

Financial-regulatory & compliance specialist team — function agents (AML/KYC, regulatory-reporting, risk-and-controls, policy & procedure, examination-prep, Bermuda-insurance) PLUS jurisdiction/regulator specialists: BMA financial-institutions (banking, trust, corporate-services, fund-admin, investment-business, money-service, digital-assets — the primary build-out, with deep AML/ATF, supervision/fees and licensing-classification trees), CIMA (Cayman), Bahamas (CBOB/SCB/ICB/Compliance Commission), Channel Islands (Jersey JFSC + Guernsey GFSC), UK PRA (twin-peaks), and US federal+state. Ships primary-source-cited regulator knowledge files (13 BMA + CIMA/Bahamas/Jersey-Guernsey/UK-PRA/US + a global standard-setter directory), best-practice rules, skills, templates, and a defensive PII-scrubbing hook (SSN, IBAN, account numbers, Bermuda TIN patterns). Inherits ravenclaude-core protocols.