Curated bundles · MITRE ATT&CK-mapped

Install governance by role, not by tool

Pick the job. Pull the bundle. Each role is a ready-made set of .rules for a real-world persona — written so anyone can grab the right one, and mapped to the MITRE ATT&CK techniques it defends against for the people who need the receipts.

On this page: 12 downloadable roles 4 categories 29 ATT&CK techniques covered
Start here

What you can download, by category

MITRE ATT&CK matrix
Application engineering Build the Product
  • The Web BuilderFrontend Engineer
  • The API ArchitectBackend Engineer
  • The Data KeeperDatabase & Data-Layer Engineer
3 roles → Cloud, DevOps & reliability Run the Platform
  • The Cloud BuilderCloud Platform Engineer
  • The Pipeline DriverDevOps / CI-CD Engineer
  • The Reliability GuardSRE / Observability Engineer
3 roles → Data & machine learning Work the Data & AI
  • The Data PlumberData Engineer
  • The Model MakerAI / ML Engineer
  • The Agent WranglerAI Agent / LLM App Builder
3 roles → Security, secrets & privacy Defend & Comply
  • The GuardianSecurity Engineer
  • The Key MasterSecrets & Identity (IAM) Engineer
  • The Compliance OfficerPrivacy & Compliance Engineer
3 roles →

SSG enforces these rules on the AI agent's tool calls — on your workstation and in CI, before anything runs. The ATT&CK mappings below are Enterprise techniques each bundle mitigates at that boundary.

Application engineering

Build the Product

For the people writing the app — front-end, APIs, and the data layer underneath.

The Web Builder

Frontend Engineer

Builds the screens people click. These rules keep the AI from leaking secrets into the browser bundle or pulling in a sketchy package.

Includes 6 rulesets
reactnextjsvuesveltetypescripttailwindcss
Defends against
T1059.007T1195.001T1552.001T1189
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1059.007 Command and Scripting Interpreter: JavaScript Execution Blocks agent-injected eval and unsafe innerHTML sinks in components.
T1195.001 Compromise Software Dependencies and Development Tools Initial Access Gates npm/pnpm adds to pinned, lockfile-locked, audited dependencies.
T1552.001 Unsecured Credentials: Credentials In Files Credential Access Stops API keys and tokens from being baked into the client bundle or a committed env file.
T1189 Drive-by Compromise Initial Access Denies untrusted third-party script tags and unpinned CDN includes.
ssg hub pull rules-react rules-nextjs rules-vue rules-svelte rules-typescript rules-tailwindcss

The API Architect

Backend Engineer

Builds the services behind the app. These rules stop the AI from opening an injection hole or shelling out where it shouldn't.

Includes 6 rulesets
nodejspythongographqlpostgresqlprisma
Defends against
T1190T1059T1505.003T1552.001
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1190 Exploit Public-Facing Application Initial Access Enforces input validation and forbids exposed debug and admin endpoints.
T1059 Command and Scripting Interpreter Execution Denies unsanitized shell-out and dynamic exec inside request handlers.
T1505.003 Server Software Component: Web Shell Persistence Blocks writing executable handlers into web-served directories.
T1552.001 Unsecured Credentials: Credentials In Files Credential Access Rejects hardcoded database and connection secrets in source.
ssg hub pull rules-nodejs rules-python rules-go rules-graphql rules-postgresql rules-prisma

The Data Keeper

Database & Data-Layer Engineer

Owns the database. These rules keep the AI from removing a table, dumping records, or hardcoding a connection string.

Includes 6 rulesets
postgresqlmysqlmongodbredissqlprisma
Defends against
T1485T1213T1486T1552.001
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1485 Data Destruction Impact Blocks schema-removal and unscoped row-removal statements issued by the agent.
T1213 Data from Information Repositories Collection Gates bulk reads and full-table dumps of sensitive data.
T1486 Data Encrypted for Impact Impact Stops agent-run mass file-encryption operations.
T1552.001 Unsecured Credentials: Credentials In Files Credential Access Rejects connection strings with embedded credentials.
ssg hub pull rules-postgresql rules-mysql rules-mongodb rules-redis rules-sql rules-prisma
Cloud, DevOps & reliability

Run the Platform

For the people who ship and keep it running — cloud, pipelines, and uptime.

The Cloud Builder

Cloud Platform Engineer

Stands up the cloud infrastructure. These rules enforce least-privilege and stop the AI from opening a bucket to the world.

Includes 6 rulesets
awsazuregcpcloudflareterraformcloudformation
Defends against
T1078T1098.001T1530T1496
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1078 Valid Accounts Privilege Escalation Enforces least-privilege IAM and rejects wildcard-scoped policies.
T1098.001 Account Manipulation: Additional Cloud Credentials Persistence Blocks the agent minting new access keys, roles, or service principals.
T1530 Data from Cloud Storage Collection Denies changes that make buckets or blobs publicly readable.
T1496 Resource Hijacking Impact Caps instance types and regions to stop crypto-mining spin-ups.
ssg hub pull rules-aws rules-azure rules-gcp rules-cloudflare rules-terraform rules-cloudformation

The Pipeline Driver

DevOps / CI-CD Engineer

Owns containers and the release pipeline. These rules keep the AI from running a privileged container or an unpinned build step.

Includes 6 rulesets
dockerkubernetesgithub-actionsgitlab-ciansibleargocd
Defends against
T1610T1195.001T1525T1059.004
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1610 Deploy Container Defense Evasion Blocks privileged, hostPath, and host-network container specs.
T1195.001 Compromise Software Dependencies and Development Tools Initial Access Pins base images and GitHub Action refs to immutable SHAs.
T1525 Implant Internal Image Persistence Rejects pushing unsigned or unscanned images to the registry.
T1059.004 Command and Scripting Interpreter: Unix Shell Execution Sanitizes pipeline run-steps and forbids pipe-to-shell installers.
ssg hub pull rules-docker rules-kubernetes rules-github-actions rules-gitlab-ci rules-ansible rules-argocd

The Reliability Guard

SRE / Observability Engineer

Keeps the lights on and the dashboards honest. These rules stop the AI from silencing alerts or wiping the logs.

Includes 6 rulesets
prometheusgrafanadatadogsplunknginxkubernetes
Defends against
T1562.001T1499T1070T1078
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1562.001 Impair Defenses: Disable or Modify Tools Defense Evasion Blocks the agent silencing alerts or disabling monitors and exporters.
T1499 Endpoint Denial of Service Impact Rejects config edits that strip rate-limits, timeouts, or autoscaling floors.
T1070 Indicator Removal Defense Evasion Protects log pipelines from agent deletion or premature rotation.
T1078 Valid Accounts Defense Evasion Scopes dashboard and datasource credentials to read-only where possible.
ssg hub pull rules-prometheus rules-grafana rules-datadog rules-splunk rules-nginx rules-kubernetes
Data & machine learning

Work the Data & AI

For the people moving data and shipping models — pipelines, training, and agents.

The Data Plumber

Data Engineer

Moves data between systems. These rules keep the AI from quietly shipping a dataset off-box or stashing warehouse creds in a notebook.

Includes 6 rulesets
pandasnumpypythonpostgresqlmongodbsql
Defends against
T1213T1567.002T1119T1552.001
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1213 Data from Information Repositories Collection Gates large extracts from warehouses, lakes, and repositories.
T1567.002 Exfiltration to Cloud Storage Exfiltration Blocks pushing datasets to unknown or non-allowlisted buckets.
T1119 Automated Collection Collection Throttles and gates bulk scrape and collection scripts.
T1552.001 Unsecured Credentials: Credentials In Files Credential Access Rejects warehouse credentials hardcoded into scripts or notebooks.
ssg hub pull rules-pandas rules-numpy rules-python rules-postgresql rules-mongodb rules-sql

The Model Maker

AI / ML Engineer

Trains and ships models. These rules block untrusted model loads and stop the AI from burning GPU on a hijacked job. (Complements MITRE ATLAS.)

Includes 6 rulesets
pytorchtensorflowhuggingfacescikit-learnpythonnumpy
Defends against
T1195.001T1552.001T1496T1567
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1195.001 Compromise Software Dependencies and Development Tools Initial Access Blocks untrusted pickle and remote-code model loads.
T1552.001 Unsecured Credentials: Credentials In Files Credential Access Protects HuggingFace, W&B, and provider API tokens from landing in scripts.
T1496 Resource Hijacking Impact Caps GPU jobs to stop hijacked training and mining workloads.
T1567 Exfiltration Over Web Service Exfiltration Blocks uploading training data or model weights off-box.
ssg hub pull rules-pytorch rules-tensorflow rules-huggingface rules-scikit-learn rules-python rules-numpy

The Agent Wrangler

AI Agent / LLM App Builder

Builds apps powered by LLMs and tools. These rules sandbox tool calls and stop a prompt-injection from exfiltrating your data. (Maps to ATLAS prompt-injection.)

Includes 6 rulesets
langchainllamaindexllmmcpanthropicopenai-codex
Defends against
T1059T1071.001T1567T1552
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1059 Command and Scripting Interpreter Execution Sandboxes the agent's tool and code-exec calls to an approved set.
T1071.001 Application Layer Protocol: Web Protocols Command and Control Constrains outbound tool HTTP to allowlisted hosts.
T1567 Exfiltration Over Web Service Exfiltration Stops prompt-injected data egress through tool calls.
T1552 Unsecured Credentials Credential Access Keeps provider API keys out of prompts, context, and logs.
ssg hub pull rules-langchain rules-llamaindex rules-llm rules-mcp rules-anthropic rules-openai-codex
Security, secrets & privacy

Defend & Comply

For the people guarding the keys and the audit trail — security, identity, and compliance.

The Guardian

Security Engineer

Hardens everything else. These rules are the safety net — no destructive shell, no secret in a commit, no control quietly turned off.

Includes 6 rulesets
securitysecretsvaultbashgitnginx
Defends against
T1059T1552T1485T1562.001
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1059 Command and Scripting Interpreter Execution Denies destructive shell — recursive wipes, pipe-to-shell installers, fork bombs.
T1552 Unsecured Credentials Credential Access Full secret-scanning gate before any write or commit.
T1485 Data Destruction Impact Blocks the agent erasing repositories, branches, or volumes.
T1562.001 Impair Defenses: Disable or Modify Tools Defense Evasion Stops the agent disabling security controls, hooks, or SSG itself.
ssg hub pull rules-security rules-secrets rules-vault rules-bash rules-git rules-nginx

The Key Master

Secrets & Identity (IAM) Engineer

Owns the keys and who can use them. These rules keep secrets out of plaintext and block unauthorized role changes.

Includes 6 rulesets
vaultsecretsawsboundaryconsulazure
Defends against
T1552.001T1098T1078T1606
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1552.001 Unsecured Credentials: Credentials In Files Credential Access Blocks plaintext secret files; routes reads through the vault.
T1098 Account Manipulation Persistence Blocks unauthorized role, policy, and binding edits.
T1078 Valid Accounts Defense Evasion Enforces scoped, short-lived, least-privilege credentials.
T1606 Forge Web Credentials Credential Access Protects token and SAML signing material from agent access.
ssg hub pull rules-vault rules-secrets rules-aws rules-boundary rules-consul rules-azure

The Compliance Officer

Privacy & Compliance Engineer

Keeps personal data handled right and the paper trail intact. These rules gate PII access and protect the audit log.

Includes 6 rulesets
privacyprivacy-linuxprivacy-macosprivacy-windowssecretssecurity
Defends against
T1005T1041T1119T1070
MITRE ATT&CK coverage — how these rules defend
TechniqueNameTacticWhat the rules do
T1005 Data from Local System Collection Blocks the agent reading local PII and sensitive data stores.
T1041 Exfiltration Over C2 Channel Exfiltration Closes covert data-egress paths from the workstation.
T1119 Automated Collection Collection Gates bulk PII collection and harvesting scripts.
T1070 Indicator Removal Defense Evasion Preserves the SSG audit trail from tampering or deletion.
ssg hub pull rules-privacy rules-privacy-linux rules-privacy-macos rules-privacy-windows rules-secrets rules-security
Don't see your role?

Compose your own bundle

Roles are just curated sets of public rulesets. Mix and match any of them, or publish your own with one command — every ruleset is signed, versioned, and auditable.

Browse all rulesets Publish your rules