production-security - Audit production security for SaaS and generative AI
Audits and enforces production security for the E-commerce Bot SaaS ecosystem, covering tenant isolation, generative AI, secrets, compliance, and go-live checks.
Tags
Updated: 2026-10-07Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Audit production security controls
- Enforce tenant data isolation
- Sanitize PII before LLM calls
- Validate secure tool calls
- Protect webhook signatures
- Manage production secrets
- Check compliance requirements
- Perform go-live security checks
Inputs
- Application code and configuration
- Tenant identity and JWT claims
- User and scraped content
- Webhook signatures
- Production secrets
- LLM requests and responses
Outputs
- Security audit findings
- Access validation decisions
- Sanitized LLM payloads
- Blocked unsafe operations
- Compliance assessment
- Go-live checklist status
Requirements
- .NET 9 and Dapper
- SQL Server 2022 with RLS
- Python Worker with RabbitMQ and Redis
- Microsoft Presidio
- Managed secrets vault
- Authenticated JWT context
- Supported LLM providers