Cloud & Infra Security

Automate Control D tasks with the Rube MCP toolkit from Composio

Automate Digicert tasks with the Rube MCP toolkit from Composio

Automate Dnsfilter tasks with the Rube MCP toolkit from Composio

Manage NextDNS filtering and security settings through Composio Rube MCP

Run Turbot Pipes cloud queries and compliance checks through Composio Rube MCP

Query Wiz cloud security issues, assets and vulnerabilities through Composio Rube MCP

Assess cloud, container and Kubernetes setups for metadata SSRF and RBAC gaps

Trace Kubernetes RBAC, service account and admission paths in CTF labs

Lock down Kubernetes with NetworkPolicy, pod security standards and RBAC

Configure mutual TLS between services for zero-trust communication and certificates

Pick the least-privilege Azure role for an identity and apply it

Create Agent Users in Microsoft Entra ID from Agent Identities for AI agents

Explain what a project member or role can see and edit, and why access is blocked

Find dangerous Active Directory ACL misconfigurations like GenericAll and WriteDACL

Spot abnormal S3, GCS and Azure Blob access such as bulk downloads and new IPs

Detect exec-into-pod, secret access and RBAC changes in Kubernetes audit logs

Audit AWS S3 bucket policies, ACLs and encryption to find public or overly open buckets

Audit Entra ID settings for risky auth policies, stale accounts and guest user risk

Audit AWS, Azure and GCP accounts against CIS benchmarks using Prowler and ScoutSuite

Audit GCP IAM for broad roles, service account key sprawl and cross-project access

Audit Kubernetes RBAC for wildcard roles, dangerous bindings and service account abuse

Trace Kubernetes RBAC paths that let subjects escalate toward cluster-admin

Scan Terraform with Checkov, tfsec and OPA to catch risky cloud settings before deploy

Run kube-bench to check a Kubernetes cluster against CIS benchmark controls

Set up SAML federation between on-prem AD and Entra ID with AD FS or a third-party IdP

Design identity governance with joiner-mover-leaver automation and access recertification

Mine existing user permissions into consolidated RBAC roles with clustering and FCA

Implement a tiered admin model for Active Directory with Tier 0 to 2 separation

Set up AWS Verified Access for VPN-less zero trust access to internal apps

Configure Google Cloud IAP with gcloud for per-request identity checks on apps

Harden LDAP against credential harvesting with LDAPS, channel binding and signing

Set workload-to-workload least privilege with NSX, Illumio or Calico microsegmentation

Roll out Cisco Duo MFA on VPN, RDP and SSH with adaptive policies and WebAuthn

Segment a network with 802.1Q VLANs for corporate, server, DMZ and IoT zones

Write pfSense firewall rules, NAT, IPsec and OpenVPN tunnels to segment network zones

Replace VPNs with Zscaler Private Access app segments, connectors and posture policies

Deploy Cloudflare Access with Tunnel to expose internal apps without inbound ports

Deploy Prisma Access for SASE zero trust with GlobalProtect and ZTNA connectors

Deploy a software-defined perimeter with single packet auth and mutual TLS

Set up Tailscale or Headscale mesh VPN with identity ACLs, exit nodes and MagicDNS

Automate GuardDuty finding response with EventBridge and Lambda to quarantine resources

Find AWS IAM privilege escalation paths in policies with boto3 and Cloudsplaining

Audit Azure storage accounts for public access, weak SAS tokens and missing encryption

Spot container escape attempts from namespace abuse, capability misuse and host mounts

Detect cloud cryptomining from compute spikes, pool traffic and GuardDuty alerts

Audit Azure Storage for public containers, weak SAS tokens and disabled logging

Block root and privileged Kubernetes pods with OPA admission rules and Falco alerts

Catch S3 data theft via CloudTrail data events, Macie alerts and bulk downloads

Catch injection attacks on serverless functions via event poisoning and layer tampering