- auth_security: password brute force, public key, user status, home dir - crypto_security: AES-CTR, HMAC-SHA256, Curve25519, Ed25519 - file_access_security: path traversal, absolute path, symlink attack - channel_security: window limits, request validation - 18 new security tests, all pass (153 total)