Our company is reviewing additional ransomware defenses after seeing a rise in incidents across our industry. We already have a fairly mature security stack, including EDR, immutable backups,…
I'm weighing the pros and cons of building our own Application Security Posture Management (ASPM) system versus purchasing a commercial one. We currently utilize Semgrep for Static Application…
I'm exploring options for services that can block upstream remote packages at an organizational level. Currently, we use JFrog's Xray, but it didn't manage to block the recent…
I'm currently using SentinelOne as our main endpoint detection and response (EDR) solution. I've heard that ESET has a really strong static detection engine, and I'm wondering if…
I'm currently using a handful of web application penetration testing tools as part of our continuous integration process, but it feels like something is missing. While these tools…
We're a mid-sized SaaS company with about 80 remote users in development and sales, preparing for our first SOC 2 Type 2 audit coming up in a couple…
I'm currently navigating a vendor assessment process, and one of the compliance requirements is for any security tools we recommend to have certifications recognized by our auditors. It's…
I came across a job description that mentions the responsibility to 'implement secure infrastructure with IaC tools.' I'm trying to wrap my head around what exactly this involves.…
I'm looking for ways to detect if my Linux file systems, especially large multi-terabyte ones, have been encrypted by ransomware or are currently being targeted. I know there…