paulb81

8 ms·

1. 1.▲
   by paulb81 7y ago

   1) If your app has decent traffic it will be attacked. But we also describe how to scan your app with Arachni on our docs: https://docs.sqreen.com/using-sqreen/how-can-i-test-sqreen-d... False positives on our RASP mod
2. 2.▲
   by paulb81 7y ago

   [I work at Sqreen] We try to provide a “dev-tool" approach to security: free trial, simple install and dev-friendly install, no need to configure the tool for hours before getting any value, etc. I would recommend just to give it a tri
3. 3.▲
   by paulb81 7y ago

   A lot of these features are actually already inside our product Sqreen, but it "only" starts at $250/month. We're also hiring if you want to help us build the missing items ;)
4. 4.▲
   by paulb81 7y ago

   As our team is growing, having to bring cookies for a larger group can be a lot. Also, you're a bit less inclined if this happens to you two days in a row... (message for Tyler: we're still waiting on those cookies)
5. 5.▲
   by paulb81 7y ago

   Thanks! Deploying the fix and stealing your heading suggestion :)
6. 6.▲
   by paulb81 7y ago

   Thanks for the feedback! That makes complete sense. We are going to update that
7. 7.▲
   Identity Farming(schneier.com)

   2 points by paulb81 7y ago|0 comments
8. 8.▲
   Why (I Think) Tech Needs the Humanities(medium.com)

   2 points by paulb81 8y ago|0 comments
9. 9.▲
   Designing Security for Billions(newsroom.fb.com)

   1 points by paulb81 8y ago|0 comments
10. 10.▲
    Hacking Jenkins Part 1 – Play with Dynamic Routing(blog.orange.tw)

    1 points by paulb81 8y ago|0 comments
11. 11.▲
    by paulb81 8y ago

    At Sqreen, we love SaaS! We especially love making SaaS companies more secure :-) The SaaS Security 1000, is a security overview of the world's fastest growing SaaS companies. We run a few basic security checks to identify network and
12. 12.▲
    Show HN: SaaS Security 1000 – Security overview of the top SaaS companies(sqreen.io)

    5 points by paulb81 8y ago|2 comments
13. 13.▲
    by paulb81 8y ago

    I feel Heavybit offers some great resources (even if you're not selling to a technical audience). I really recommend you to check it out https://www.heavybit.com/library/
14. 14.▲
    A Day in the Life of Americans(flowingdata.com)

    155 points by paulb81 8y ago|61 comments
15. 15.▲
    Streaming data with Amazon Kinesis(blog.sqreen.io)

    5 points by paulb81 8y ago|1 comments
16. 16.▲
    The Ultimate PHP Security Checklist(sqreen.io)

    3 points by paulb81 8y ago|0 comments
17. 17.▲
    Historic Tale Construction Kit – Bayeux(htck.github.io)

    102 points by paulb81 8y ago|11 comments
18. 18.▲
    by paulb81 9y ago

    This is really great input! Thank you. We will definitely take this into consideration for the next iteration.
19. 19.▲
    by paulb81 9y ago

    Thank you. You're right. We will change that
20. 20.▲
    by paulb81 9y ago

    Thanks for your input. Unfortunately, startups don't have this kind of resources (CIO/CISO etc.). What we see is that security is often handled by CTOs in Seed/SeriesA startups.
21. 21.▲
    by paulb81 9y ago

    It's inspired by this checklist. You can get two code implementations here: https://github.com/sqreen/CTOSecurityChecklist https://github.com/sqreen/DevOpsSecurityChecklist
22. 22.▲
    by paulb81 9y ago

    I worked on this checklist and your feedback is very appreciated. You're right on all your points from a pure security point of view. We should be doing security as soon as possible. Unfortunately, the reality of building a startup is