Claude Security Audit

Claude Security Audit

A Claude Code slash command for running comprehensive white-box and gray-box security audits on your projects, with findings mapped to OWASP Top 10:2025, CWE, NIST CSF 2.0, SANS/CWE Top 25, OWASP ASVS 5.0, PCI DSS 4.0.1, MITRE ATT&CK, SOC 2 and ISO 27001:2022.

Features

- Slash Command - Run /security-audit in any project from Claude Code
- Local Output - Report saves to ./security-audit-report.md in your project root
- OWASP Top 10:2025 Coverage - All 10 categories explicitly tested (A01-A10:2025)
- CWE Mapping - Every finding tagged with specific CWE IDs
- NIST CSF 2.0 Mapping - Every finding maps to Govern, Identify, Protect, Detect, Respond or Recover
- Multi-Framework Compliance - SANS/CWE Top 25, OWASP ASVS 5.0, PCI DSS 4.0.1, MITRE ATT&CK, SOC 2 and ISO 27001:2022
- White-Box Testing - 20 attack categories with 475+ individual checks
- AI/LLM Security - Prompt injection, output sanitization, RAG poisoning, cost monitoring, tool calling permissions
- Diff Mode - Scan only git-changed files for fast PR-level reviews
- Recheck Mode - Re-audit specific files or directories after fixes
- Gray-Box Testing - Role-based access probing, API endpoint testing, credential boundary checks, error differential analysis
- Security Hotspots - Flags sensitive code that needs careful review during PRs
- Code Smells - Quality patterns that breed security bugs
- Multi-Framework Detection - Auto-detects and loads checks for up to 3 frameworks (Laravel, Next.js, FastAPI, Express, Django, Rails, Spring Boot, ASP.NET Core, Go, Flask, Nuxt.js, SvelteKit)
- Findings First - Shows findings by default, append --fix to include remediation code blocks
- Lite Mode - Append --lite to reduce token usage (OWASP + CWE + NIST only, skips extra compliance mapping)
- CI Gating…