1. Library
  3. Skills
  5. Security and compliance
  7. Security Incident Response
Heavybit Skill

Security Incident Response

Preparing for, managing, and recovering from security incidents: breaches, attacker compromise, data exposure, and regulatory response. Covers incident response plans, breach communications, regulatory obligations, and forensics coordination. Drawn from practitioners at HackerOne, Splunk, and others.
Built from what these operators shared
  • Maarten Van Horenbeeck
  • Justin McCarthy
  • Harshil Parikh
  • Niall Browne
  • +1
Maarten Van Horenbeeck, Marten Mickos, Justin McCarthy, Harshil Parikh, Niall Browne
Free with Crucible
Security Incident Response
Built from six library resources

What a skill is

A skill is a set of working instructions your agent loads when you need it, built from the strategies operators shared in the Heavybit Library. It guides the work and you still do it. Heavybit reads and approves every skill before it ships, and keeps updating skills as new content enters the Library. Skills are plain text, so you or your agent can read any skill in full before acting on it. Your agent decides how to apply a skill, so check its work; if a skill gets something wrong, ask your agent to report it or email platform@heavybit.com.

Connect your agent

  1. Add the endpoint below to your harness: Claude Code, Codex, Claude, Cursor, ChatGPT, or another that supports MCP.
  2. Sign in to your Heavybit account with Google or GitHub when your agent asks. It's free, and your first sign-in creates the account.
  3. Tell your agent what you're working on. It finds the right skill, or you can ask for one by name.
MCP endpointhttps://crucible.heavybit.com/mcp

Built from the Heavybit Library

The operators behind this skill shared what they know in these talks, podcasts, and articles. Every one is free in the Heavybit Library.

  • Video

Disclosing Security Incidents from Routine to Breach

FEB 11, 2020With Maarten Van Horenbeeck
Security incidents are inevitable, the only thing you’re in complete control of is how you respond to them, and a well managed response can save your company from destruction. In this DevGuild session, Zendesk CISO Maarten Van Horenbeeck explores the anatomy

Disclosing Security Incidents from Routine to Breach
Video

Disclosing Security Incidents from Routine to Breach

Watch23 MIN
Building Securely for User Privacy
FEB 27, 2020
Video
Democratizing Security From The Top Down
JAN 28, 2020
Video
Community Building Tools From HackerOne’s Head of Global Hacker Community
APR 23, 2020
Article
  • Article

The Downtime Panel: October’s DDoS Attack Decoded

DEC 9, 2016With Ted Carstensen
On November 16th, Heavybit member CircleCI hosted their monthly Office Hours meetup at our San Francisco Clubhouse to convene a panel of operations experts to discuss the major DDoS attack in October.
The Downtime Panel: October’s DDoS Attack Decoded
Article

The Downtime Panel: October’s DDoS Attack Decoded

Read1 MIN
Understanding Vulnerability Disclosure with MĂ„rten Mickos & the HackerOne Team
OCT 28, 2019
Article

Connect your agent to Crucible, Heavybit's MCP server

One endpoint gives your agent every Heavybit Skill, a search of the Heavybit Library, and a direct line to Heavybit. Sign in free with Google or GitHub. Skills load when your agent needs them, so there is nothing to download or update.

crucible.heavybit.com/mcpConnect your agent