#saastrana — Public Fediverse posts

🎙️ Here are the glimpses of conversation from the recent #SaaSTrana Podcast.

In this SaaSTrana podcast, Mona Salvi (Senior Director – Product Security, HubSpot) talks to Venkatesh (Venky) Sundar about building a unified org structure and North Star metrics to drive security-related initiatives in a cohesive working environment.

She also shares how to manage three pillars – platform security + trust & safety + payments fraud together under a single leadership umbrella.

Key highlights from the discussion:

Key highlights from the discussion :
- About Mona Salvi and HubSpot
- Developing the mindset of intrinsic vs. extrinsic security
- Driving secure product experiences along with focusing on core business
- The pillars of platform security + trust and safety + payments fraud
- Breaking the silos between the risk officer and the security officer
- Developing applications at speed without impacting the security
- Building security champions within the organizations
- Building North Star metrics for security teams - Security
an enabler for customers to pick the right vendor of choice
- Protecting from threats caused by OpenAI and LLM tools (The facts on utilizing security co-pilots)

Tune in to the full podcast now! Listen on:
1. YouTube: https://youtu.be/HpLD6OU9OYM
2. Spotify: https://bityl.co/L6V6
3. Amazon Music: https://bityl.co/L6V8
4. Apple Podcasts: https://bityl.co/L6VF
5. Anchor (others): https://bityl.co/L6VD

#cybersecurity #webapplications #openai #LLMTools #productsecurity #cyberthreats #webapplicationsecurity #saas #saassecurity #fraudprotection #saassecurity #appsec #apptrana #indusface

👉 API attacks have risen by 400% in the last six months.

This has caused 59% of organizations to delay the release of new apps due to #apisecurity concerns.

As industries look to integrate with more 3rd party apps, the security of #OpenAPIs has become critical.

Join Vivek Gopalan in the upcoming webinar, where he discusses:

- Best practices for API discovery & documentation
- Identifying OWASP API Top 10 vulnerabilities
- Automating the creation of positive security models
- Protecting APIs from vulnerabilities, #DDoS, and #botattacks

Book your seat now! https://bit.ly/47lLLMN

#apis #apiattacks #owaspapi #apirisk #apiprotection #apiintegration #apptrana #saastrana #indusface

🎙️ Here are the glimpses of conversation from our recent #SaaSTrana Podcast.

In this podcast, Sanjay Nagamangalam (Executive Director, MSCI Inc.) talks to Venkatesh (Venky) Sundar (Founder, Indusface) about secure coding best practices & methods to handle customer-sensitive data. 🔐

He also shares why securing software isn't an accident and requires cautious efforts at an organizational level to make it possible. 🤝

Here are some of the key highlights from the discussion:
- About Sanjay's experience & projects (Microsoft, Corel & Salesforce)
- Data encryption at rest and in transit
- The concept of - Dynamic Data Masking
- Security problems, despite good coding practices
- Security practices across each stage of the organizational processes
- Methods/Steps while accessing customer-sensitive data
- #WAF & #WAAP for Application Hardening
- Utilizing generative AI for building improved security models
- Three guiding principles to follow in #cybersecurity

Tune in to listen to the complete conversation now!

1. YouTube: https://youtu.be/6hgHBi94niQ
2. Spotify: https://bityl.co/IzDV
3. Apple Podcasts: https://bityl.co/IzDY
4. Amazon Music: https://bityl.co/IzDe
5. Anchor: https://bityl.co/IzDf
6. Website: https://bit.ly/3JksKQo

#securecoding #dataencryption #securitystandards #saas #paas #applicationsecurity #devops #devsecops #apptrana #indusface

🎙️ Listen to the latest episode of the #SaaSTrana #podcast

In this podcast, Sanjay Nagamangalam (Executive Director, MSCI Inc.) talks to Venkatesh (Venky) Sundar about secure coding best practices & methods to handle customer-sensitive data. 🔐

He also shares why securing software isn't an accident and requires cautious efforts at an organizational level to make it possible. 🤝

Here are some of the key highlights from the discussion:

- About Sanjay's experience & projects (Microsoft, Corel & Salesforce)
- Data encryption at rest and in transit
- The concept of - Dynamic Data Masking
- Security problems, despite good coding practices
- Security practices across each stage of the organizational processes
- Methods/Steps while accessing customer-sensitive data
- WAF & WAAP for Application Hardening
- Utilizing generative AI for building improved security models
- Three guiding principles to follow in cybersecurity

Tune in to listen to the complete conversation now! (Link in comments)

#securecoding #security #cybersecurity #dataencryption #securitystandards #saas #paas #waap #waf #cybersecurity #applicationsecurity #devops #devsecops #apptrana #indusface

👉 The latest episode of the #SaaSTrana #podcast is live!

In this podcast 🎙️, Val Novikov (Co-Founder & CTO, FISPAN) talks to Venkatesh (Venky) Sundar about the #APIsecurity challenges while integrating with proprietary Banking applications and ERP systems.

He also discusses why #Fintech #SaaS #startups require a deep investment of time, resources, and money in #cybersecurity right from day zero of the product development 🔐.

𝐊𝐞𝐲 𝐡𝐢𝐠𝐡𝐥𝐢𝐠𝐡𝐭𝐬 𝐟𝐫𝐨𝐦 𝐭𝐡𝐞 𝐝𝐢𝐬𝐜𝐮𝐬𝐬𝐢𝐨𝐧:
- Introduction to Val and FISPAN
- Compliance as a product-market-fit
- The dark side of security #compliance
- Integrating APIs & best practices for API security
- Efforts required in documenting #APIs
- Fixing critical vulnerabilities within SLAs
- Impact due to third-party components and Virtual Patching
- Evaluating a #WAF and getting the most out of it
- Advice for the engineers taking up leadership roles

Listen on:
1. YouTube: https://youtu.be/DBA2QJ5l4gc
2. Spotify: https://bityl.co/IhVY
3. Apple Podcasts: https://bityl.co/IhVa
4. Amazon Music: https://bityl.co/IhVf
5. Anchor: https://bityl.co/IhVg

#vulnerabilities #virtualpatching #apiprotection #appsec #apptrana #indusface

👋 The latest episode of the #saastrana #podcast is now live 🎙️ !

In this podcast, Scott Tomilson (Sr.Director, Ping Identity) talks with Venkatesh (Venky) Sundar about best practices for implementing Single Sign-On (#SSO) in #SaaS apps 🔐.

He also discusses how applications are at risk due to humans, devices, and apps. And having behavioral-based anomaly scoring and security is the need of the hour. ⚠️

Key highlights from the discussion:
- Introduction to Scott and Ping Identity
- Identity access and Single Sign-On (SSO)
- Zero Trust Network Framework (ZTNA)
- Continuous Adaptive Risk Trust Assessment (CARTA)
- Performing Gray Box Testing as a best practice
- Integrating WAF and IAM tools for next-gen security
- Security practices during the development life-cycle and post-deployments
- Advice for SaaS Start-up Founders

Listen to the full podcast now:
YouTube: https://youtu.be/8R2WZ3aMWuA
Spotify: https://bityl.co/HlIx
Apple Podcasts: https://bityl.co/HlHt
Amazon Music: https://bityl.co/HlI1

#singlesignon #saasapps #waf #saasstartups #CARTA #ZTNA #IAMtools #appsecurity #saasindustry #saasfirm #saassecurity #cybersecurity #identitymanagement #apptrana #indusface

👉 Do you know why it takes SIX months to patch a SINGLE #vulnerability?

Sunil Agrawal (#CISO, Glean), a software veteran with 22+ years of cybersecurity experience and 35+ patents on this name, explains why in the below 1-minute video.

He has worked in organizations like Adobe, Netflix, Motorola, Qualcomm, etc., and has seen the evolution of #cybersecurity attacks and changes in hacker behavior over the years. 🔐

He joins Venky on the latest episode of our #SaaSTrana #Podcast 🎙️ and discusses his experience of a sub-domain takeover and how it led him to build foundationally secure SaaS products.

Other highlights of the discussion:
The Virtual Browser patent
The evolution of the security landscape (web 1.0 to web 4.0)
Tech stack of Glean
Protecting sensitive customer data
Security in the product DNA and pen-test
Sub-domain takeover & a good cyber citizen
The buyer behavior & security requirements today
Why does it take 200 days to patch a vulnerability?
Virtual patching and how it benefits organizations
Two questions to ask every WAF provider
Compliance is a by-product of foundationally solid security
Having a security partner can provide 10x returns

Listen to the full podcast now!
1. YouTube: https://youtu.be/cuSriL2nMwk
2. Spotify: https://bityl.co/HYTG
3. Apple Podcasts: https://bityl.co/HYLT
4. Amazon Music: https://bityl.co/HYTO
5. Anchor: https://bityl.co/HYLM

#cyberattacks #hacking #saasbusiness #saasproducts #saas #pentesting #virtualpatching #waf #firewall #thoughtleadership #apptrana #indusface

👉 Tune in to the #SaaSTrana #Podcast, where our founder Venky interviews top SaaS leaders to understand their #AppSec challenges. 🎙️

In this podcast, we have Sunil Agrawal (CISO, Glean), who has 22+ years of cybersecurity experience and 35+ patents in his name.

He has worked in organizations like Adobe, Netflix, Motorola, Qualcomm, etc., and has seen the evolution of cybersecurity attacks and changes in hacker behavior over the years. 🔐

He shares his experience of a sub-domain takeover and how it led him to build foundationally secured SaaS products.

Key highlights from the discussion :
- Introduction to Sunil and Glean
- The Virtual Browser patent
- The evolution of the security landscape (web 1.0 to web 4.0)
- Tech stack of Glean
- Protecting sensitive customer data
- Security in the product DNA and pen-test
- Sub-domain takeover & a good cyber citizen
- The buyer behavior & security requirements today
- Why does it take 200 days to patch a vulnerability?
- Virtual patching and how it benefits organizations
- Two questions to ask every WAF provider
- Compliance is a by-product of foundationally solid security
- Having a security partner can provide 10x returns

For the full podcast listen on:
1. YouTube: https://youtu.be/cuSriL2nMwk
2. Spotify: https://bityl.co/HYTG
3. Apple Podcasts: https://bityl.co/HYLT
4. Amazon Music: https://bityl.co/HYTO

#cybersecurity #cyberattacks #hacking #saasbusiness #saasproducts #saas #pentesting #virtualpatching #waf #firewall #vulnerability #apptrana #indusface #podcast #saastrana #thoughtleadership

👉 Tune in to the latest episode of the #SaaSTrana #Podcast.

🎙️ In this podcast, Alok Mishra (Co-Founder & CTO, Goodmeetings) discusses with Venky how he looks at #security as a vital part of building any #SaaSbusiness.

He shares his unplanned appointment with a #ransomware attacker and how it led him to build best practices to deal with #applicationsecurity problems.

He even talks about some common security demands from customers and how fulfilling the expectations is a must for organizations 🧳

Key highlights from the discussion :
- About Alok and his ventures
- The future of hybrid work
- Integrating with multiple third-party applications
- Situational awareness in cybersecurity
- Cloud keys on public GitHub & ransomware attack
- Performing security monitoring
- Building best practices
- Security demands by customers
- Pitfalls to be avoided by SaaS founders
- Say No to Ransomware!

Listen on:
1. YouTube: https://youtu.be/EXu8TAzoqGU
2. Spotify: https://bityl.co/HGQ1
3. Apple Podcasts: https://bityl.co/HGQ4
4. Amazon Music: https://bityl.co/HGQV
5. Anchor (others): https://bityl.co/HGQe

#saas #ransomwareattacks #cybersecurity #ransomware #appsec #apptrana #indusface #saastrana #cloudsecurity #thoughtleadership