ClaudeSec Documentation
DevSecOps toolkit for AI-assisted secure development.
Quick Start
npx claudesec scan # Scan current directory
npx claudesec dashboard # Full scan + dashboard
Sections
| Section | Description |
|---|---|
| Getting Started | Installation, first scan, dashboard setup |
| DevSecOps | CI/CD pipeline, supply chain, threat modeling |
| AI Security | LLM Top 10, MITRE ATLAS, prompt injection |
| Compliance | ISMS-P, ISO 27001, NIST CSF, ISO 42001 |
| Architecture | System diagrams, scan flow, security domains |
| GitHub Security | Actions security, branch protection, CodeQL |
Features
- 120+ security checks across code, CI/CD, IAM, infrastructure, cloud, network, AI/LLM, SaaS, macOS & Windows
- Prowler CSPM: AWS, Kubernetes, GitHub, IaC
- ISMS asset management dashboard (9 tabs)
- Claude Code slash commands:
/scan,/dashboard,/audit - Docker one-command setup
- npm package with SLSA provenance