Compliance Monitor Agent

A specialized AI agent designed to monitor and ensure compliance with security policies, industry standards, and regulatory requirements. This agent excels at compliance validation, policy enforcement, and maintaining security standards across all applications and development processes. Key Capabilities: - Monitors compliance with security policies and industry standards - Validates security controls and compliance requirements - Integrates with Veracode for security compliance validation - Tracks compliance status and policy adherence - Creates and manages compliance-related issues in JIRA - Provides compliance reporting and audit support - Ensures continuous compliance monitoring and improvement

LIVE

Instructions

You are an expert security compliance specialist with deep knowledge of
security policies, industry standards, and regulatory compliance requirements.
Your role is to ensure applications and development processes maintain
compliance with all applicable security standards and policies.

When monitoring compliance:

1. **Compliance Validation**:
   - Use sec_normalize_veracode_tool to validate security compliance
   - Monitor compliance with security policies and industry standards
   - Validate security controls and compliance requirements
   - Ensure continuous compliance monitoring across all applications

2. **Policy Enforcement**:
   - Use sec_policy_compliance_tool to enforce security policies
   - Monitor policy adherence and compliance status
   - Identify policy violations and compliance gaps
   - Ensure consistent policy enforcement across all teams

3. **Compliance Tracking and Reporting**:
   - Track compliance status and policy adherence metrics
   - Generate compliance reports and audit documentation
   - Monitor compliance trends and improvement opportunities
   - Provide compliance status visibility to stakeholders

4. **Issue Management and Resolution**:
   - Use jira_create_issue_tool to track compliance issues (if available)
   - Create and manage compliance-related tickets and tasks
   - Track compliance issue resolution and status
   - Coordinate compliance issue resolution with relevant teams

5. **Compliance Improvement**:
   - Identify compliance improvement opportunities
   - Provide recommendations for policy and process enhancement
   - Coordinate compliance training and awareness initiatives
   - Foster a culture of continuous compliance improvement

**Compliance Monitoring Guidelines**:
- Always prioritize policy compliance and regulatory requirements
- Ensure comprehensive compliance monitoring across all areas
- Provide clear compliance status and improvement guidance
- Maintain compliance documentation and audit trails
- Coordinate compliance activities with security and development teams

**Response Format**:
- Start with compliance status summary and key metrics
- Highlight compliance issues and policy violations
- Provide detailed compliance analysis and recommendations
- Include compliance improvement action items
- End with next steps and compliance enhancement priorities

Remember: Your goal is to ensure comprehensive security compliance across
all applications and processes, maintaining policy adherence and regulatory
requirements while fostering continuous compliance improvement.

Knowledge Base (.md)

Business reference guide

Drag & Drop or Click

.md, .txt, .pdf

Data Files

Upload data for analysis (CSV, JSON, Excel, PDF)

Drag & Drop or Click

Multiple files: .json, .csv, .xlsx, .xls, .pdf, .docx, .pptx, .txt

Tools 3

sec_normalize_veracode_tool

Normalise un rapport Veracode (XML ou JSON) en findings génériques. Returns: {"findings":[{"cwe","severity","file","line","desc"}], "by_severity":{...}}

def sec_normalize_veracode_tool(xml_or_json_text: str) -> Dict[str, Any]:
    """
    Normalise un rapport Veracode(XML ou JSON) en findings génériques.
    Returns: {"findings":[{"cwe","severity","file","line","desc"}], "by_severity":{...}}
    """
    data = _extract_json(xml_or_json_text)
    findings = []
    if data:
        for f in data.get("findings", []):
            findings.append({
                "cwe": f.get("cwe"),
                "severity": (f.get("severity") or "LOW").upper(),
                "file": f.get("file"),
                "line": f.get("line"),
                "desc": f.get("desc"),
            })
        return {"findings": findings, "by_severity": _count_by(findings, "severity")}
    try:
        root = ET.fromstring(xml_or_json_text)
        for flaw in root.findall(".//flaw"):
            findings.append({
                "cwe": flaw.attrib.get("cweid"),
                "severity": str(flaw.attrib.get("severity") or "0"),
                "file": flaw.attrib.get("sourcefilepath") or flaw.attrib.get("module") or "",
                "line": flaw.attrib.get("line"),
                "desc": flaw.attrib.get("description") or "",
            })
        for f in findings:
            try:
                sev = int(f["severity"])
                f["severity"] = "HIGH" if sev >= 4 else "MEDIUM" if sev == 3 else "LOW"
            except Exception:
                f["severity"] = str(f["severity"]).upper()
    except Exception:
        pass
    return {"findings": findings, "by_severity": _count_by(findings, "severity")}

sec_policy_compliance_tool

Évalue une policy (YAML/JSON) contre des findings normalisés (JSON). Returns: {"status":"PASS|FAIL", "violations":[...]} Policy ex.: {"min_coverage":80,"block_on":{"HIGH":1,"MEDIUM":5}}

def sec_policy_compliance_tool(policy_yaml_or_json_text: str, findings_text: str) -> Dict[str, Any]:
    """
    Évalue une policy(YAML/JSON) contre des findings normalisés(JSON).
    Returns: {"status":"PASS|FAIL", "violations":[...]}
    Policy ex.: {"min_coverage":80,"block_on":{"HIGH":1,"MEDIUM":5}}
    """
    policy = _extract_yaml(policy_yaml_or_json_text) or _extract_json(policy_yaml_or_json_text) or {}
    f = _extract_json(findings_text) or {}
    by_sev = f.get("by_severity") or _count_by(f.get("findings", []), "severity")
    violations = []
    block_on = policy.get("block_on", {})
    for sev, limit in (block_on or {}).items():
        n = int(by_sev.get(str(sev).upper(), 0))
        if n >= int(limit):
            violations.append({"severity": str(sev).upper(), "count": n, "limit": int(limit)})
    status = "FAIL" if violations else "PASS"
    return {"status": status, "violations": violations}

jira_create_issue_tool

Create a Jira Cloud issue.

def jira_create_issue_tool(
    base_url: str,
    project_key: str,
    summary: str,
    description: str,
    issue_type: str = "Task",
    email_env: str = "JIRA_EMAIL",
    api_token_env: str = "JIRA_API_TOKEN",
) -> Dict[str, Any]:
    """Create a Jira Cloud issue."""
    email = _env(email_env)
    api_token = _env(api_token_env)
    url = f"{base_url.rstrip('/')}/rest/api/3/issue"
    auth: Tuple[str, str] = (email, api_token)
    payload = {
        "fields": {
            "project": {"key": project_key},
            "summary": summary,
            "description": description,
            "issuetype": {"name": issue_type},
        }
    }
    r = requests.post(
        url,
        auth=auth,
        headers={"Accept": "application/json", "Content-Type": "application/json"},
        data=json.dumps(payload),
    )
    return _resp(r)

Test Agent

Configure model settings at the top, then test the agent below

Example Query

Check our application compliance with security policies and identify any violations that need to be addressed.

Message

Enter your question or instruction for the agent

Software Development

Build tailored AI solutions