Skip to content
Get packs

Software-Defined Perimeter Deployment

Guides an agent through planning and auditing a zero-trust, cloaked-network (SDP) deployment

Source Download skill
Repository
mukul975/Anthropic-Cybersecurity-Skills
Stars
35,430
Licence
Apache-2.0
Files
7 files

What it does

When installed, the agent gets a structured playbook for deploying a Software-Defined Perimeter, a zero-trust design where servers stay hidden from the network until a user is authenticated and authorized. It walks through setting up the controller, gateways, client software, certificates and single-packet authorization, then through validation steps such as checking that ports look closed to scanners and that revoked certificates are refused. It also includes two Python scripts that can probe a host's ports and check TLS mutual authentication, so the agent can audit a deployment rather than only describe one.

Great for

  • Security engineers planning or hardening a zero-trust network access rollout in a lab or authorized test environment
  • Students learning how SDP, single-packet authorization and mutual TLS fit together
  • Teams preparing evidence for zero-trust compliance reviews

Skip it if

  • Production networks where the scripts are run without written authorization, since they scan ports and connect to hosts, which can be illegal or disruptive
  • Users expecting a turnkey product: the skill gives guidance and basic audit scripts, not a working SDP controller or gateway
  • Anyone relying on it as a complete security assessment, because the port checks are simple and the workflow text is generic

Try asking

  • “Walk me through deploying an SDP controller and gateways to replace our VPN for three internal apps.”
  • “Audit our gateway at 10.0.0.5 to check whether any ports respond without SPA, in our lab only.”
  • “Create a validation checklist for testing that revoked client certificates are denied access.”
  • “Map our zero-trust rollout to NIST SP 800-207 and the CSA SDP specification.”
Step-by-step guide: how to use Software-Defined Perimeter DeploymentInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 7 original files, the Apache-2.0 licence and an attribution note.

    deploying-software-defined-perimeter.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip deploying-software-defined-perimeter.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip deploying-software-defined-perimeter.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Only point the scripts at systems you own or are explicitly authorized to test, and start with a lab host.
  • Ask the agent to explain each script before running it, and review the port range it will scan.
  • Use the workflow and checklist as a planning document, then verify vendor-specific details against your actual SDP product's documentation.

What's inside

  • assets/template.md
  • references/api-reference.md
  • references/standards.md
  • references/workflows.md
  • scripts/agent.py
  • scripts/process.py
  • SKILL.md

Redistributed unmodified from mukul975/Anthropic-Cybersecurity-Skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.