Practical cybersecurity frameworks and resources for security professionals, developers, and organizations. Created by David Matousek — Fractional CISO, Security Architect, and LinkedIn Top Voice in Cybersecurity.
A 10-principle security framework for AI-assisted development. Designed to integrate with Claude Code (or any AI coding assistant) to enforce secure-by-default practices across every code generation and file operation.
Covers: memory safety, input validation, secure defaults, security logging, least privilege, encryption, fail-secure patterns, dependency security, secret management, and security testing integration.
- Security Manifesto — Full framework
- Integration Guide — Setup instructions for Claude Code projects
A strategic framework for organizational security posture assessment and improvement. Provides a structured approach to evaluating and strengthening security across seven key domains.
| Project | Description |
|---|---|
| tachi | Automated threat modeling — STRIDE + AI-specific threats in one command |
| AOD Kit | SDLC Triad governance template for AI agent-assisted development |
I build secure, governed AI-powered development workflows for the enterprise. These frameworks come from hands-on experience leading security architecture, compliance, and risk programs — and from writing the Agentic-Oriented Development book series on applying security and governance principles to AI agent workflows.
- LinkedIn — Agentic-Oriented Development book series (9 chapters published)
- davidmatousek.com
This content is shared for educational and professional use. See individual framework documents for specific terms.
Found these resources useful? Have suggestions? Open an issue or submit a pull request.