{
  "scanning": {
    "static": {
      "enabled": true,
      "tools": ["semgrep", "codeql", "sonarqube"],
      "rules": ["owasp-top10", "cwe-top25", "sans-top25"],
      "severity": ["high", "critical"],
      "languages": ["javascript", "typescript", "python", "java", "go"],
      "customRules": true
    },
    "dynamic": {
      "enabled": true,
      "tools": ["zap", "burp"],
      "endpoints": "auto-discover",
      "authentication": "auto-configure",
      "crawling": true,
      "apiTesting": true
    },
    "dependency": {
      "enabled": true,
      "tools": ["snyk", "npm-audit", "github-advisory", "retire.js"],
      "autoUpdate": "security-only",
      "allowedLicenses": ["MIT", "Apache-2.0", "BSD-3-Clause", "ISC"],
      "checkTransitive": true,
      "vulnerabilityDatabase": "multiple"
    },
    "secrets": {
      "enabled": true,
      "tools": ["trufflesecurity", "detect-secrets", "gitleaks"],
      "patterns": ["api-keys", "passwords", "certificates", "tokens"],
      "excludePaths": ["test/", "docs/", "*.example.*"],
      "entropy": true,
      "customPatterns": []
    },
    "infrastructure": {
      "enabled": false,
      "tools": ["checkov", "terrascan"],
      "cloudProviders": ["aws", "azure", "gcp"],
      "compliance": ["cis", "nist"]
    }
  },
  "hardening": {
    "headers": {
      "contentSecurityPolicy": "strict",
      "strictTransportSecurity": true,
      "xFrameOptions": "DENY",
      "xContentTypeOptions": true,
      "referrerPolicy": "strict-origin-when-cross-origin",
      "permissionsPolicy": true,
      "crossOriginEmbedderPolicy": false
    },
    "authentication": {
      "passwordPolicy": {
        "minLength": 12,
        "requireSpecialChars": true,
        "requireNumbers": true,
        "requireUppercase": true,
        "requireLowercase": true,
        "preventReuse": 12,
        "maxAge": 90
      },
      "mfa": {
        "enforce": true,
        "methods": ["totp", "sms", "email", "hardware"],
        "backupCodes": true,
        "gracePeriod": 7
      },
      "session": {
        "timeout": 3600,
        "absoluteTimeout": 28800,
        "renewOnActivity": true,
        "secureCookies": true,
        "sameSite": "strict"
      },
      "lockout": {
        "maxAttempts": 5,
        "lockoutDuration": 900,
        "progressiveLockout": true
      }
    },
    "rateLimit": {
      "global": "1000 req/hour",
      "perUser": "100 req/min",
      "perIP": "60 req/min",
      "sensitive": "5 req/min",
      "login": "3 req/min",
      "registration": "2 req/hour"
    },
    "input": {
      "validation": true,
      "sanitization": true,
      "lengthLimits": true,
      "typechecking": true,
      "encoding": "utf-8"
    },
    "cors": {
      "strict": true,
      "allowedOrigins": [],
      "allowedMethods": ["GET", "POST"],
      "allowCredentials": false
    }
  },
  "monitoring": {
    "realtime": {
      "enabled": true,
      "events": ["login", "data-access", "privilege-escalation", "failed-auth"],
      "anomalyDetection": true,
      "machineLearning": true,
      "behavioralAnalysis": true
    },
    "alerts": {
      "channels": ["slack", "email", "pagerduty", "webhook"],
      "severity": {
        "critical": "immediate",
        "high": "5min",
        "medium": "1hour",
        "low": "daily"
      },
      "escalation": true,
      "deduplication": true
    },
    "logging": {
      "security": true,
      "audit": true,
      "access": true,
      "errors": true,
      "retention": "1year",
      "encryption": true,
      "integrity": true
    },
    "siem": {
      "enabled": false,
      "provider": "splunk",
      "retention": "1year",
      "correlation": true
    }
  },
  "compliance": {
    "standards": {
      "owasp": {
        "enabled": true,
        "version": "2021",
        "categories": "all",
        "customChecks": true
      },
      "sox": {
        "enabled": false,
        "auditTrail": true,
        "dataRetention": "7years",
        "accessControls": true
      },
      "gdpr": {
        "enabled": true,
        "dataMapping": true,
        "consentManagement": true,
        "rightToErasure": true,
        "dataPortability": true,
        "privacyByDesign": true
      },
      "hipaa": {
        "enabled": false,
        "encryption": "aes-256",
        "accessControls": "rbac",
        "auditLogs": true,
        "dataMinimization": true
      },
      "pci": {
        "enabled": false,
        "dataEncryption": true,
        "networkSecurity": true,
        "accessManagement": true,
        "monitoring": true
      }
    }
  },
  "encryption": {
    "atRest": {
      "enabled": true,
      "algorithm": "aes-256-gcm",
      "keyRotation": true,
      "keyManagement": "aws-kms"
    },
    "inTransit": {
      "enforceHttps": true,
      "tlsVersion": "1.3",
      "certificatePinning": false,
      "perfectForwardSecrecy": true
    },
    "application": {
      "sensitiveFields": true,
      "piiEncryption": true,
      "tokenization": false
    }
  },
  "incidentResponse": {
    "automated": {
      "isolation": false,
      "notification": true,
      "dataCollection": true,
      "containment": false
    },
    "procedures": {
      "detection": "automated",
      "analysis": "human",
      "containment": "hybrid",
      "recovery": "manual"
    },
    "communication": {
      "internal": true,
      "external": false,
      "legal": false,
      "media": false
    }
  },
  "testing": {
    "penetration": {
      "frequency": "quarterly",
      "scope": "full",
      "automated": true,
      "reporting": "detailed"
    },
    "vulnerability": {
      "frequency": "weekly",
      "automated": true,
      "falsePositiveFiltering": true
    }
  }
}