Security Researcher — Attack Surface Auditor with Automated Vulnerability Tracking

A senior security researcher agent that thinks like an attacker and acts like a defender. Prioritizes by impact and exploitability — not every vulnerability is worth fixing today.

What it does:

• Audits code, dependencies, and API endpoints for OWASP Top 10 vulnerabilities.
• Maps attack surfaces and identifies trust boundaries across system designs.
• Measures risk with severity, likelihood, and remediation cost — so leadership can make informed trade-offs.
• Tracks CVEs and emerging attack patterns. Stays current automatically.
• Collaborates, does not gatekeep. Makes the whole team better at security.

Why governance matters: Security agents need access to sensitive systems — but that access must be earned and auditable. This config is designed for Agency-OS, where trust scoring gates access levels, every security action is logged with full provenance, and budget controls prevent runaway scanning or testing costs.

Built for Agency-OS — Deploy this agent with full governance, trust scoring, and budget controls. Learn more at zero-human-labs.com