> For the complete documentation index, see [llms.txt](https://docs.heeler.com/mrecEO40m5D6bt7Pq5pE/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.heeler.com/mrecEO40m5D6bt7Pq5pE/solutions-and-use-cases.md). # Playbooks Complete walkthroughs showing how Heeler's parts combine to resolve one security problem, from start to finish. The rest of the docs explain features one at a time. A **playbook** shows how they **work together** to solve a real problem — start from a goal you recognize ("is this CVE actually exploitable?", "prove our posture to an auditor"), and follow it through every part of the product that's involved, end to end. Each playbook names the capabilities it draws on, walks the steps in order with realistic examples, and ends with how to confirm it worked — linking out to the feature docs when you need deeper configuration detail. ## Investigate and respond to risk


Determine Exploitability in Production	Narrow a CVE across your estate to the instances that are reachable, running and internet-exposed.	Determine Exploitability in Production
Contain a Leaked Secret	From detection to a rotated, revoked credential that can't come back.	Contain a Leaked Secret

## Remediate and verify


Fix a Vulnerable Dependency and Verify It's Deployed	Route it to the right team, auto-generate a validated fix, and confirm it deployed.	Fix a Vulnerable Dependency and Verify It's Deployed
Run Unattended Dependency Remediation	The same loop at program scale — critical and high dependency findings driven to zero with no operator dispatching the work.	Run Unattended Dependency Remediation

## Secure your software supply chain


Build a Supply Chain Security Program	Stop malicious and immature packages at the door, and fix the rest in priority order.	Build a Supply Chain Security Program
Secure AI Coding Agents	Discover, score, and govern the skills, MCP servers, and agent files running with your developers' access.	Secure AI Coding Agents
Secure Deployments on Vercel	Bring your Vercel estate under one model — coverage, findings, data, AI surface, and prevention.	Secure Deployments on Vercel

## Run and prove your program


Run an SLO-Driven AppSec Program	Every finding owned, on a clock, with new risk gated out at the pull request.	Run an SLO-Driven AppSec Program
Vulnerability Jail	Attach a real consequence to overdue remediation — a team past its SLO can open pull requests, but not merge them.	Vulnerability Jail
Evidence for a Security Audit	Pull posture, SLO attainment, license compliance, SBOMs, and a change log into one evidence pack.	Evidence for a Security Audit

## Design securely


Threat-model a service from what's actually running	Export a runtime-informed model of a service and drive a STRIDE assessment from real data.	Threat-Model a Service

--- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.heeler.com/mrecEO40m5D6bt7Pq5pE/solutions-and-use-cases.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.