This workstream is about finding and analyzing vulnerabilities in systems. - Security assessments of systems and features (design docs, PRDs). - Architectural risks - Configurations (in particular cloud) - Monitoring and observation