Hack23/homepage

github-agentic-workflows

GitHub Agentic Workflows (gh-aw) - markdown-based AI automation with 5-layer security, safe outputs, and Continuous AI patterns

agentic-workflow-development

gh-aw CLI usage, compilation, testing, debugging, add-wizard, and CI/CD practices for GitHub Agentic Workflows

agentic-workflow-orchestration

Multi-agent coordination, orchestrator-worker patterns, /plan decomposition, and project coordination for GitHub Agentic Workflows

agentic-workflow-security

5-layer defense-in-depth security for GitHub Agentic Workflows - safe outputs, threat detection, AWF firewall, and zero-trust patterns

continuous-ai-patterns

Continuous AI patterns from Agent Factory - issue triage, documentation sync, code quality, security scanning, and project coordination

gdpr

GDPR compliance including privacy by design, data protection requirements, consent management, right to be forgotten, and data breach response

cryptography

Approved cryptographic algorithms, TLS enforcement, key management, and certificate handling per Hack23 Cryptographic Controls Policy

data-classification

Data classification levels (Public, Internal, Confidential, Restricted) and handling requirements per Hack23 Data Classification Policy

cis-controls

CIS Controls v8.1 critical security controls for effective cyber defense across all Hack23 projects

nist-csf

Map security controls to NIST Cybersecurity Framework 2.0 functions - Govern, Identify, Protect, Detect, Respond, Recover

secure-code-review

Security-focused code review practices ensuring vulnerabilities are caught before deployment

compliance-checklist

Comprehensive compliance checklist for ISO 27001, NIST CSF, CIS Controls, GDPR, and NIS2 across all Hack23 projects

information-security-strategy

Organization-wide information security strategy aligned with business objectives and ISMS framework

incident-response

Security incident detection, analysis, containment, eradication, recovery, and lessons learned per NIST SP 800-61r2 and ISO 27035

input-validation

Comprehensive input validation and output encoding practices to prevent injection attacks across all Hack23 projects

secrets-management

Never commit secrets, manage credentials securely using environment variables, vaults, and Hack23 ISMS key management policy

vulnerability-management

Systematic vulnerability lifecycle management with SLAs aligned with OWASP, NIST, and CIS Controls

acceptable-use

Behavioral expectations, professional standards, and responsible technology use

ai-governance

Comprehensive AI risk management, EU AI Act compliance, and LLM usage governance

mobile-device-management

BYOD policy, personal device security, endpoint protection, and mobile app security

network-security

Cloud-native network protection, zero-trust architecture, and AWS VPC security

owasp-llm-security

LLM-specific security controls, prompt injection prevention, OWASP LLM Top 10

physical-security

Home office security controls, equipment protection, and environmental security for remote operations

privacy-policy

GDPR-compliant privacy framework, privacy by design, and data subject rights

segregation-of-duties

Role separation, compensating controls for single-person operations, dual control

open-source

🔓 Open source governance demonstrating security excellence through transparent practices following Hack23 Open Source Policy

threat-modeling

Systematic threat analysis using STRIDE and MITRE ATT&CK frameworks following Hack23 ISMS Threat Modeling Policy

brand-voice-tone

Hack23 brand voice, tone, messaging guidelines, and content style standards for consistent communication across all channels

business-strategy

Strategic business growth, market positioning, client acquisition, partnership development, and revenue optimization for cybersecurity consulting services

content-marketing

B2B content marketing strategy, demand generation, SEO content creation, and thought leadership for cybersecurity professional services

code-review-practices

Code review best practices, quality gates, security checks, and constructive feedback guidelines for collaborative development

testing-strategy

Comprehensive testing strategy covering unit, integration, E2E, security, accessibility, and performance testing for web applications

api-documentation

API documentation standards using OpenAPI/Swagger, including endpoints, authentication, examples, and error handling

product-documentation

Product documentation standards covering user guides, feature documentation, release notes, and end-user communication

copilot-agent-patterns

GitHub Copilot custom agent design patterns, best practices, collaboration workflows, and agent orchestration

mcp-server-integration

Model Context Protocol (MCP) server integration, configuration, and usage patterns for GitHub Copilot custom agents

ethical-information-ops

Ethical information operations, strategic communication, counter-disinformation, and transparency advocacy for accountability projects

osint-methods

Open Source Intelligence (OSINT) collection, analysis, and verification methods for political intelligence, security research, and transparency projects

c4-modeling

C4 model (Context, Container, Component, Code) diagram patterns with Mermaid syntax for architecture documentation

documentation-portfolio

Required architecture documents including current/future state diagrams, data models, flowcharts, state diagrams, mindmaps, and SWOT analysis