All loops
SecurityEasy 10 min· claude-haiku-4-5
RBAC drift checker
RBAC drift checker with audit-grade logs.
Read the full Security build guide →NOT DEPLOYEDNOT DEPLOYED
0190ms
Trigger
cron(0 7 * * *) fired · every day · 07:00
021030ms
Agent
claude-haiku-4-5 · in 1330 tok · out 408 tok
03300ms
Tools
aws-mcp/anthropic:messages.create → 200 OK · 270ms
0480ms
Verify
schema check · zod v3 passed
05170ms
Output
linear ticket · SOC2 evidence stored
0650ms
Notify
audit log written · runbook link attached
SUCCESS
0%
0 runs
P50
0ms
median
P95
0ms
tail
AVG COST
—
per run
LAST OK
never
—
LAST FAIL
never
none
Latency · last 30 runs0 samples
no runs yet
Latest output · what your users see
SEC-1050CWE-798
Public S3 bucket `acme-logs-prod` — no encryption at rest
// press Test to run once · Watch live to keep streaming · Deploy to make it real
The problem
Security tasks are tedious, easy to skip, and dangerous to skip.
The outcome
Tedium is automated; humans review summaries and approve.
Ingredients & skills
Secrets
- ANTHROPIC_API_KEY
Providers
- Anthropic
MCP servers
- aws-mcp
- github-mcp
#security#audit#claude
How it works
RBAC drift checker with audit-grade logs.
Step 1
1 — Read-only scan
All cloud + repo calls are scoped read-only by the locker.
Step 2
2 — Summarise
Claude ranks findings by blast radius, not raw severity.
Step 3
3 — Ticket
Top findings open tickets with owner + suggested fix.
One-line deploy
The button above runs the same command with your saved config. This is the raw CLI form.
bash
npx claudeloops deploy rbac-drift-checker