ahmadvh/octochains

identity-access-anomaly-review

Analyzes authentication and authorization events for failed-login clustering, privilege-escalation chains, credential-stuffing patterns, and MFA-bypass indicators.

breach-notification-triage

Determines whether a security incident involves personal data, triggers regulatory breach-notification obligations (e.g. GDPR Art. 33/34), and what notification timelines apply.

insider-threat-behavioral-analysis

Detects anomalous behavior by authenticated users that may indicate insider threats through behavioral analysis of access patterns, privileged actions, and data movement.

threat-intel-triage

Identifies indicators of compromise, anomalous network/endpoint behavior, and active intrusion patterns from the provided data.

dsgvo-health-data-compliance

Audits architectural proposals and data schemas for GDPR/DSGVO Article 9 (Special Categories of Personal Data) violations.

eu-ai-act-tiering

Classifies proposed AI deployments into strict EU AI Act risk tiers.

gdpr-review

Audits data processing systems, logging mechanisms, and user tracking implementations for compliance with EU GDPR / German DSGVO mandates.

open-source-license-scan

Scans technology stacks and dependencies for viral open-source licensing contamination (Copyleft risks).

cac-ltv-viability

Audits the unit economics of customer acquisition against lifetime value.

product-market-fit-score

Evaluates whether the product solves a bleeding-neck pain point or is merely a 'nice-to-have' feature.

revenue-synergy-mapping

Evaluates market positioning and the realistic probability of cross-selling the product.

runway-burn-analysis

Extracts explicit financial metrics to mathematically evaluate cash runway and margin viability.

tech-debt-audit

Audits architectural choices for hidden scalability bottlenecks and operational tech debt.