π Do you know why it takes SIX months to patch a SINGLE #vulnerability?
Sunil Agrawal (#CISO, Glean), a software veteran with 22+ years of cybersecurity experience and 35+ patents on this name, explains why in the below 1-minute video.
He has worked in organizations like Adobe, Netflix, Motorola, Qualcomm, etc., and has seen the evolution of #cybersecurity attacks and changes in hacker behavior over the years. π
He joins Venky on the latest episode of our #SaaSTrana #Podcast ποΈ and discusses his experience of a sub-domain takeover and how it led him to build foundationally secure SaaS products.
Other highlights of the discussion:
The Virtual Browser patent
The evolution of the security landscape (web 1.0 to web 4.0)
Tech stack of Glean
Protecting sensitive customer data
Security in the product DNA and pen-test
Sub-domain takeover & a good cyber citizen
The buyer behavior & security requirements today
Why does it take 200 days to patch a vulnerability?
Virtual patching and how it benefits organizations
Two questions to ask every WAF provider
Compliance is a by-product of foundationally solid security
Having a security partner can provide 10x returns
Listen to the full podcast now!
1. YouTube: https://youtu.be/cuSriL2nMwk
2. Spotify: https://bityl.co/HYTG
3. Apple Podcasts: https://bityl.co/HYLT
4. Amazon Music: https://bityl.co/HYTO
5. Anchor: https://bityl.co/HYLM
#cyberattacks #hacking #saasbusiness #saasproducts #saas #pentesting #virtualpatching #waf #firewall #thoughtleadership #apptrana #indusface
#vulnerability #ciso #cybersecurity #saastrana #podcast #cyberattacks #hacking #saasbusiness #saasproducts #saas #pentesting #virtualpatching #waf #firewall #thoughtleadership #apptrana #indusface
π Tune in to the latest episode of the #SaaSTrana #Podcast.
ποΈ In this podcast, Alok Mishra (Co-Founder & CTO, Goodmeetings) discusses with Venky how he looks at #security as a vital part of building any #SaaSbusiness.
He shares his unplanned appointment with a #ransomware attacker and how it led him to build best practices to deal with #applicationsecurity problems.
He even talks about some common security demands from customers and how fulfilling the expectations is a must for organizations π§³
Key highlights from the discussion :
- About Alok and his ventures
- The future of hybrid work
- Integrating with multiple third-party applications
- Situational awareness in cybersecurity
- Cloud keys on public GitHub & ransomware attack
- Performing security monitoring
- Building best practices
- Security demands by customers
- Pitfalls to be avoided by SaaS founders
- Say No to Ransomware!
Listen on:
1. YouTube: https://youtu.be/EXu8TAzoqGU
2. Spotify: https://bityl.co/HGQ1
3. Apple Podcasts: https://bityl.co/HGQ4
4. Amazon Music: https://bityl.co/HGQV
5. Anchor (others): https://bityl.co/HGQe
#saas #ransomwareattacks #cybersecurity #ransomware #appsec #apptrana #indusface #saastrana #cloudsecurity #thoughtleadership
#saastrana #podcast #security #saasbusiness #ransomware #applicationsecurity #saas #ransomwareattacks #cybersecurity #appsec #apptrana #indusface #cloudsecurity #thoughtleadership
Episode 5 of The #SaaSTrana #Podcast is now live! ποΈ
In this podcast, Raghu (Co-Founder, Sprinto) discusses with Venky how SaaS Startups have to upgrade their security standards significantly π to become SOC 2 compliant and the major pitfalls they should avoid.
He differentiates between SOC 1, SOC 2, & SOC 3 compliance in super-easy terms and highlights some overlapping parameters between security standards like ISO 27001, PCI DSS, HIPPA, GDPR, etc. π
He talks about how meeting Application Security best practices is a must-have factor for any compliance. If avoided, it can make selling products/services challenging in international markets. π
Key highlights from the discussion :
- Compliance automation with Sprinto
- What are AICPA and NIST?
- SOC 2 compliance and audit procedure
- Differences between SOC 1 Vs. SOC 2 Vs. SOC 3
- What are Type 1 and Type 2 in SOC 2
- Disparities between FEDRAMP, GDPR, PCI DSS, ISO 27001, etc.
- Companies need compliance for an added trust
Listen on:
YouTube: https://youtu.be/u7KVSMCmbPI
Spotify: https://bityl.co/H27B
Apple Podcasts: https://bityl.co/H279
Amazon Music: https://bityl.co/H26x
Anchor(others): https://bityl.co/H27G
#soc2 #soc #gdpr #aicpa #iso #saasstartups #applicationsecurity #appsec #apptrana #indusface #saas #saassecurity #saasstartups
#saastrana #podcast #soc2 #soc #gdpr #aicpa #iso #saasstartups #applicationsecurity #appsec #apptrana #indusface #saas #saassecurity
ποΈ Here are some titbits of the conversations between John Goecke (CEO, StratusVue) and our Founder Venkatesh (Venky) Sundar (Venky) on the #SaaSTrana Show.
John shares his story of being attacked by ransomware in 2018 β οΈ and how three levels of redundant #backups failed due to the same.
Tune in to the podcast for other interesting conversations on π‘:
- Protecting #APIs
- #Datasovereignty across countries
- Organization can be impacted despite being secured for #OWASP10
- Trust but verify your security
- Becoming security compliant for Federal projects
- Verifying and auditing for security
-#Security - a prime business enabler
For the full podcast: Listen on
YouTube: https://youtu.be/5qaoUhUCUwk
Spotify: https://bityl.co/GiXp
Apple Podcasts: https://bityl.co/GiXm
Amazon Music: https://bityl.co/GiXg
#podcast #zeroday #zerodayvulnerability #ransomwareattacks #hacking #saassecurity #apisecurity #appsec #apptrana #indusface #constructiontechnology
#saastrana #backups #apis #datasovereignty #owasp10 #security #podcast #zeroday #zerodayvulnerability #ransomwareattacks #hacking #saassecurity #apisecurity #appsec #apptrana #indusface #constructiontechnology
ποΈ Here are some titbits of the conversations between John Goecke (CEO, StratusVue) and our Founder Venkatesh (Venky) on the #SaaSTrana Show.
John shares his story of being attacked by ransomware in 2018 β οΈ and how three levels of redundant #backups failed due to the same.
Tune in to the podcast for other interesting conversations on π‘:
- Protecting #APIs
- #Datasovereignty across countries
- Organization can be impacted despite being secured for #OWASP10
- Trust but verify your security
- Becoming security compliant for Federal projects
- Verifying and auditing for security
-#Security - a prime business enabler
Listen on:
YouTube: https://youtu.be/5qaoUhUCUwk
Spotify: https://bityl.co/GiXp
Apple Podcasts: https://bityl.co/GiXm
Amazon Music: https://bityl.co/GiXg
Anchor (other): https://bityl.co/GiW5
Website: https://bityl.co/Gp89
#podcast #zeroday #zerodayvulnerability #ransomwareattacks #hacking #saassecurity #apisecurity #appsec #apptrana #indusface #constructiontechnology
#saastrana #backups #apis #datasovereignty #owasp10 #security #podcast #zeroday #zerodayvulnerability #ransomwareattacks #hacking #saassecurity #apisecurity #appsec #apptrana #indusface #constructiontechnology
π Tune in to the latest episode of the #SaaSTrana #Podcast.
ποΈ In this podcast, Puneet Miglani (Founder - Candor Technology) discusses with Venky how app development companies are emphasizing security in their AMC contracts.
He shares that security is a moving goalpost and a must-have for their customers. Having a security partner helps them provide better services and boost their revenue streams. π€
He even shares the factors one must consider when choosing a security partner to build a long-term sustainable business. π§³
Here are some of the key highlights from the discussion:
- Candor's journey- digital marketing to #ITsolutions
- Focusing on security as a separate project & software development as a separate one
- Today's market understanding of #applicationsecurity
- Is open-source safe?
- Risk mitigation and building resiliency
- Security is like oxygen & not a multi-vitamin!
- The need for a #securitypartner to provide focus on service offerings
- Things to consider while choosing a security partner
Listen on-
1. YouTube: https://youtu.be/9lt1uwI1x44
2. Spotify: https://bityl.co/GvHC
3. Apple Podcast: https://bityl.co/GvHA
4. Amazon Music: https://bityl.co/GvHJ
5. Anchor (others): https://bityl.co/GvHH
#webdevelopment #appdevelopment #cybersecurity #ITSecurity #riskmitigation #bot #softwaredevelopment #itsolutions #appsec #apptrana #indusface
#saastrana #podcast #ITsolutions #applicationsecurity #securitypartner #webdevelopment #appdevelopment #cybersecurity #itsecurity #riskmitigation #bot #softwaredevelopment #appsec #apptrana #indusface
ποΈ A #ransomware story...
John Goecke (CEO, StratusVue) shares his story of being attacked by ransomware in 2018 β οΈ and how 3 levels of redundant #backups failed due to the same.
Here are some titbits of his conversations with our Founder Venkatesh (Venky) on the #SaaSTrana Show.
Other interesting conversations includeπ‘:
- Protecting #APIs
- #Datasovereignty across countries
- Organization can be impacted despite being secured for #OWASP10
- Trust but verify your security
- Becoming security compliant for Federal projects
- Verifying and auditing for security
-#Security - a prime business enabler
Listen on:
1. YouTube: https://youtu.be/5qaoUhUCUwk
2. Spotify: https://bityl.co/GiXp
3.Apple Podcasts: https://bityl.co/GiXm
4.Amazon Music: https://bityl.co/GiXg
5.Anchor (other): https://bityl.co/GiW5
6. Website: https://bityl.co/Gp89
#podcast #zeroday #zerodayvulnerability #ransomwareattacks #hacking #saassecurity #apisecurity #appsec #apptrana #indusface #constructiontechnology
#ransomware #backups #saastrana #apis #datasovereignty #owasp10 #security #podcast #zeroday #zerodayvulnerability #ransomwareattacks #hacking #saassecurity #apisecurity #appsec #apptrana #indusface #constructiontechnology
π The most straightforward explanation of zero-day in 10 seconds!
John Goecke talks about complex security terms & relates them to real business problems in a matter of moments on the latest #SaaSTrana Show ποΈ.
He is the founder of StratusVue and discusses with Venky how everything changed for them after a #ransomware attack β οΈ in 2018.
He also shares how the construction industry ποΈ is a soft target for hackers as there is no regulatory oversight, unlike in banking and healthcare. And security is always an afterthought for business owners.
His practical learnings from unexpected ransomware attacks on his business are wise words of wisdom for anyone in SaaS! π‘
Hear from him now:
YouTube: https://youtu.be/5qaoUhUCUwk
Spotify: https://bityl.co/GiXp
Apple Podcasts: https://bityl.co/GiXm
Amazon Music: https://bityl.co/GiXg
Anchor (other): https://bityl.co/GiW5
#podcast #zeroday #zerodayvulnerability #ransomwareattacks #hacking #saas #saassecurity #apisecurity #appsec #apptrana #indusface #constructiontechnology
#saastrana #ransomware #podcast #zeroday #zerodayvulnerability #ransomwareattacks #hacking #saas #saassecurity #apisecurity #appsec #apptrana #indusface #constructiontechnology
Our recent interaction with Kashish Jajodia (CTO Draup) is now available on all the leading podcast channels.
He shares the real stories of his early days in SaaS & how a small malware led them to sleepless nights.
If you havenβt yet checked out his recent conversation with our founder Venky, you have surely missed some amazing insights on SaaS security...
Listen to the full podcast now:
Listen on:
1. Spotify: https://bityl.co/GUwv
2. Apple Podcasts: https://bityl.co/GUwy
3. Amazon Music: https://bityl.co/GUx2
4. Anchor (others): https://bityl.co/GUx5
#saastrana #securitypodast #podcast #appsec #apptrana #draup #saas #saascompanies #saasproducts #saassecurity #security #malware @Indusface
#saastrana #securitypodast #podcast #appsec #apptrana #draup #saas #saascompanies #saasproducts #saassecurity #security #malware