Cybersecurity Response Bureau

name: cybersecurity-response-bureau
version: "1.0"
description: A security operations template for SaaS teams, MSPs, and infrastructure-heavy companies that need stronger incident coordination, threat detection follow-up, and executive-ready reporting without standing up a full SOC.

agents:
  - id: engineering-security-engineer
    role: "Security Engineer"
    prompt_file: "agents/engineering-security-engineer.md"
    source_skill: "engineering/engineering-security-engineer.md"
  - id: engineering-threat-detection-engineer
    role: "Threat Detection Engineer"
    prompt_file: "agents/engineering-threat-detection-engineer.md"
    source_skill: "engineering/engineering-threat-detection-engineer.md"
  - id: engineering-incident-response-commander
    role: "Incident Response Commander"
    prompt_file: "agents/engineering-incident-response-commander.md"
    source_skill: "engineering/engineering-incident-response-commander.md"
  - id: engineering-sre
    role: "SRE (Site Reliability Engineer)"
    prompt_file: "agents/engineering-sre.md"
    source_skill: "engineering/engineering-sre.md"
  - id: support-executive-summary-generator
    role: "Executive Summary Generator"
    prompt_file: "agents/support-executive-summary-generator.md"
    source_skill: "support/support-executive-summary-generator.md"

workflows:
  - id: security-escalation
    trigger: alert.raised
    actions:
      - classify-threat
      - open-incident-brief
      - assign-response-owners
      - prepare-leadership-update