Audit, fix, verify, repeat.
A security audit loop for software projects: open-source scanners for secrets, code, dependencies, infrastructure and CI, plus its own review of access control, business logic and AI features. Findings go into a tracked register, developers fix them, rescans confirm every fix, and a gate decides when the project is ready for sign-off.
3 in the Claude listing