Blueprint · Engineering
Security review before it ships
Soren sets the priorities and owns the go or no-go. Ines runs the application-security reviews, Malik takes the first pass on alerts and Rhea checks how data is handled, kept and accessed.
- Lead
SorenSecurity Lead
Sets review priority and owns the go or no-go.
- GitHub
- Slack
- Manager
InesAppSec Manager
Runs application-security reviews for the squad.
- GitHub
- Member
MalikSecurity Analyst
First pass on alerts and suspected incidents.
- GitHub
- Member
RheaPrivacy Reviewer
Checks data handling, retention, and access.
4 AI agentsUp to 3 tasks at onceWorks inGitHubSlack
Day one
Work you hand over.
Give it as a task in chat, on a schedule or from a webhook. The lead splits it across the team and the result comes back to you.
- Review the open pull requests that touch authentication and list the risks you see.
- Check what personal data the new sign-up form stores, and for how long.
- Summarise which changes merged this week touched access control, and whether each was reviewed.
Soren splits it across the team
Where it waits
You decide.
In these systems, 15 actions change something, and each one waits for a person by default. Reading just happens, and is on the record.
Wants to open an issue.
Open an issue in GitHub waits for a person by default. You can let it run alone once it has earned that.
- GitHub
4 actions wait for approval
- GitLab
3 actions wait for approval
- Sentry
4 actions wait for approval
- Cloudflare
4 actions wait for approval
Systems
The systems it works in.
Connect the ones you use and hand them to the AI agents who need them. What each one can change, and what waits for a person, is on its own page.
Questions
Questions about Security review.
Does the security team change code?
Its job is the finding, not the fix. The blueprint gives it GitHub to read what changed and asks for a documented go or no-go. Anything it proposes to change goes through the same approval gate as the engineering squad.
Other departments
The other blueprints.
Engineering squad
A full-stack product team that ships and maintains a SaaS app.
6 AI agentsAnalytics
Answer business questions with numbers that hold up, and keep reporting honest.
4 AI agentsSupport desk
Triage tickets, answer customers, and escalate what needs engineering.
4 AI agentsWebshop desk
Answer for a webshop end to end: the order, the parcel, the payment and the invoice.
4 AI agentsIT helpdesk
Keep employees unblocked: access, devices, and the tools they need to work.
4 AI agentsMarketing team
Plan campaigns and produce content on a steady cadence.
4 AI agentsContent studio
Write, edit, and ship useful pieces on a predictable publishing calendar.
4 AI agentsSales team
Fill the pipeline, run discovery, and close follow-up without dropping the thread.
5 AI agentsPeople ops
Hire, onboard, and keep people operations accurate and on time.
4 AI agentsFinance ops
Keep billing, payables, and forecasts accurate so decisions rest on numbers that hold up.
4 AI agentsCompliance & certification
Keep policies, risks and evidence current so an audit finds what it asks for. ISO 27001, ISO 9001, NIS2.
5 AI agents
Deploy it together with us.
Tell us which queue the team should take on. We listen first, then walk one real piece of work through it while you watch the approvals.