Samadhi Security

Security consulting

Calm, clear security for applications, AWS, and AI agents.

Services

Design and code reviews, threat modeling, and a secure SDLC that developers actually follow.

AWS posture against the CIS benchmark, fixes for misconfigurations, and drift monitoring that shows who changed what.

Guardrails for LLM applications and AI coding agents, risk assessment, and AI governance.

vCISO support, a security program built from zero, and controls mapped to frameworks and regulations.

CloudSheriff: a read-only CIS drift monitor for AWS2026
A read-only monitor that finds CIS drift in AWS, traces the change in CloudTrail, and uses an LLM to explain alerts, not decide them.
Hermes: a multi-agent security review assistant in Slack2026
One Slack entry point and one orchestrator route security reviews to specialist reviewer skills and return an evidence-based report.
Agent guardrails: making AI coding agents safe to use2026
How we make AI coding agents safe to use: verification gates, test-integrity hooks, an allowlisted MCP server and a post-mortem.
Automating firewall policy change review2025
A browser automation that walks a firewall policy review queue, opens each revision and saves screenshot evidence with a step log.
Finding security-tool coverage gaps by reconciling the CMDB2025
Reconcile the CMDB against security-tool exports and show the coverage gaps as a Sankey diagram. The public demo uses synthetic data.
A repeatable security audit for your own Mac2026
A repeatable, evidence-based Mac audit: persistence items, privacy grants, browser extensions, and a second round to verify fixes.

David Shih

Founder · Security Engineer