Heavybit Skill
Security Program Foundations
How to start and scale a security program at a startup: what to prioritize, where security sits in the org, how to build security culture, and when to hire a CISO. Drawn from practitioners at HashiCorp, Snyk, HackerOne, and others.
Built from what these operators shared
Security Program Foundations
Built from seven library resources
What a skill is
A skill is a set of working instructions your agent loads when you need it, built from the strategies operators shared in the Heavybit Library. It guides the work and you still do it. Heavybit reads and approves every skill before it ships, and keeps updating skills as new content enters the Library. Skills are plain text, so you or your agent can read any skill in full before acting on it. Your agent decides how to apply a skill, so check its work; if a skill gets something wrong, ask your agent to report it or email platform@heavybit.com.
Connect your agent
- Add the endpoint below to your harness: Claude Code, Codex, Claude, Cursor, ChatGPT, or another that supports MCP.
- Sign in to your Heavybit account with Google or GitHub when your agent asks. It's free, and your first sign-in creates the account.
- Tell your agent what you're working on. It finds the right skill, or you can ask for one by name.
MCP endpointhttps://crucible.heavybit.com/mcp
Built from the Heavybit Library
The operators behind this skill shared what they know in these talks, podcasts, and articles. Every one is free in the Heavybit Library.
- Video
The Anatomy Of A Modern Security Team
JAN 21, 2020With Lisa Hall and Shruti Gupta
How founders should approach early security initiatives, identify the key traits of a great security team member, and the tenets of security org design.
Video
The Anatomy Of A Modern Security Team
Watch22 MIN
- Video
Building Securely for User Privacy
FEB 27, 2020With Marten Mickos
HackerOne CEO Marten Mickos discusses app sec strategies for building securely and ensuring user privacy from the earliest stages of your company. He also provides examples of different security models and processes at later-stage dev and enterprise softwareâŠ
Video
Building Securely for User Privacy
Watch40 MIN