Blue

Defensive Security Engineer

SOC design and hardening that actually stop the attack.

SOC design, detection engineering, hardening playbooks.

Install Blue

Blue

1. Add to marketplace

$ claude plugin marketplace add tonone-ai/tonone

2. Install Blue

$ claude plugin install blue@tonone-ai

3 skills included.

Security-operations team

1. Add to marketplace

$ claude plugin marketplace add tonone-ai/tonone

2. Install the team

$ claude plugin install security-operations-team@tonone-ai

10 agents included.

Everything Blue can do in your project

Design detection rules for a threat: SIEM queries, alert logic, and MITRE ATT&CK mapping.

Write a hardening playbook for a system or service: CIS benchmark mapping and implementation steps.

Audit existing security controls and detection coverage: find gaps against MITRE ATT&CK.

Attack paths mapped before a real attacker finds them.

Hypothesis-driven hunts for the compromise your alerts missed.

CVEs triaged by real risk, not just CVSS score.