emremm

5 ms·

1.
by emremm 5y ago
Much :)
2.
by emremm 5y ago
Legal is often where agreements go to die. This is a tough one, and one that so far, we've opted out of until we can create a better process for doing so than what exists out there. FWIW, I think pima (pima.app) does a pretty good job
3.
by emremm 5y ago
Did you seriously just join HN to try and troll our Launch HN post? If so, I'm sorry, I hope you find better uses of your time. We're trying to solve a problem for founders and infosec teams alike. You're perfectly entitled
4.
by emremm 6y ago
Appreciate the support and love the feature suggestions! Definitely something we'll be thinking about. Would love to run it by you as we build!
5.
by emremm 6y ago
These are good questions. I might even say...a mini...questionnaire? Seriously speaking - you bring up some interesting questions. I used our tool to respond to your questions, because I think it helps illustrate the point (see link below)
6.
by emremm 6y ago
Good question. Short answer is no, we don't insure you in the deal. I'd be willing to bet (and infosec folks doing assessments should chime in here), but it's rarely, if ever, a binary decision on a single question (unless yo
7.
by emremm 6y ago
Great question. I agree, answering a question like that in a thoughtless way can make your company look pretty unprofessional. We build a 'profile' of the company - what it does, they systems used, the type of data it handles (and
8.
by emremm 6y ago
Overall, this is an underserved market, and saving smart people time on security questionnaires is a goal we both have. Here's what I know about our product - we can ensure that the quality of the responses are exceptionally high - our
9.
by emremm 6y ago
FWIW, we'd love to help there eventually, we just think that the vendor side of the market is so abysmally underserved that we wanted to start there. The goal of this whole thing is to speed up the entire process of security review and
10.
by emremm 6y ago
Much appreciated! Like JJ said, we use Webflow for hosting the landing page and customized a template (softbit) https://webflow.com/templates/html/softbit-saas-website-temp... . Credit for customization of the desi
11.
by emremm 6y ago
Appreciate the way you've thought about this, Nick. I like the suggestions that you bring up to at the end: What if we could produce compliant configuration snippets for live systems? What if we could express internal compliance
12.
by emremm 6y ago
No doubt. We're sure there will be better ways, and we'd like to help in getting there. Rather than die on that battlefield before we've built something meaningful, we're working to help at least solve the immediate need
13.
by emremm 6y ago
Very cool! Security awareness and training that doesn't suck (I'm talking to you, Java "training" Applets from 2000) is probably one of the highest impact "soft" things that companies can do to actually make
14.
by emremm 6y ago
Yes. (no but) The way that our system is built, every question has (up to) three possible inputs: A selection An additional detail An attachment When we parse a questionnaire, the system picks up whether there's a selection option avai
15.
by emremm 6y ago
inserts celebration gif here
16.
by emremm 6y ago
Glad our product resonates! A couple points of differentiation: 1) First-shot completion: Our system typically gets 90%+ of the questionnaire completed with no user involvement. I don't think RFPIO (or other RFP-focused platforms) do t
17.
Launch HN: Stacksi (YC W21) – Doing Security Questionnaires, So Your Team Isn't
134 points by emremm 6y ago|89 comments