Agent skill · marketing growth · jeremylongshore
find-cybersecurity-firm
Use whenever the user wants to find, shortlist, vet, or enrich US cybersecurity firms — pen-testing/red team, security audits, vCISO, SOC 2 readiness, incident response, managed SOC, IAM, cloud security, and AppSec. Triggers on "find me a pen-testing firm for our SOC 2 audit", "shortlist three vCISO services for our healthcare-tech startup", "we need an incident response retainer", or "pull contact info for these 8 security firm domains", even when described indirectly (we got breached, prepare us for the compliance audit, get us SOC 2 ready). Drives the ServiceGraph API (api.servicegraph.co) — a 100k+ US firm catalog filterable by industry, services, location, size, ratings. Skip in-house security hires, "how do I patch CVE-X" or "configure firewall Y" DIY questions, security-product reviews (CrowdStrike vs SentinelOne, etc.), generic security knowledge questions, consumer/personal security advice, non-US firms, individual freelancers and bug-bounty hunters.
Why this skill is useful
Integrates with the ServiceGraph API to provide specific cybersecurity firm recommendations that the AI wouldn't generate on its own.
What it needs
Requires curl installed locally. Requires servicegraph account access. About 8k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
find-cybersecurity-firm Overview Drive the ServiceGraph API (https://api.servicegraph.co) to find, shortlist, and enrich US cybersecurity firms via the proservices dataset. Always pin serviceprovided:cybersecurity — that's the only relevant structured tag in the live catalog. Older docs and the catalog source mention sub-tags like pen-testing and security-audit, but in the current release none of those exist as separate tags — cybersecurity is the broad catch-all and every sub-type (pen-testing, red-team, vCISO, SOC 2 readiness, IR retainer, IAM, cloud security, AppSec) is a keyword substring search on firm text. Confirm via /v1/datasets/proservices/fields?includevalues=1 once per session. The industry tag also drifts between releases — newer catalogs may use industry:cybersecurity, older ones used industry:security. Confirm the value via /fields and pin both industry and serviceprovided:cybersecurity for safety. Any HTTP client works (curl, fetch, requests). Examples below use curl. When NOT to use this skill Consumer/personal cybersecurity ("my Gmail got hacked", "how do I secure my home wifi") — the catalog is B2B procurement only. In-house security hires (Security Engineer, CISO, SOC analyst). DIY/configuration questions ("how do I patch CVE-X", "configure firewall rules", "review this Terraform"). Security-product comparisons (CrowdStrike vs SentinelOne, EDR vendors, SIEM vendors). Generic security knowledge ("explain zero-trust", "what is OWASP Top 10"). Non-US firms / individual freelance pen-testers / bug-bounty hunters. Prerequisites ServiceGraph access, either: the ServiceGraph MCP server (https://mcp.servicegraph.co) loaded in your harness — this plugin's .mcp.json wires it up; OAuth 2.1 + PKCE keeps credentials in the harness sandbox — or a ServiceGraph API key (vk…, minted at <https://servicegraph.co/profile/api-keys>) available as SERVICEGRAPHAPIKEY in the environment or .env.local for the REST path (setup steps under Auth below). …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/find-cybersecurity-firm