Startup left production AWS keys public for 5 months; their VDP was silent(benzimmermann.dev)

4 pointsby Terrettahace 4 meses2 comments

Startup left production AWS keys public for 5 months; their VDP was silent

https://benzimmermann.dev/blog/pump-vdp-silence

3 comments

> The company displays SOC 2 and ISO 27001:2022 certifications on its website, claims least-privilege IAM practices, conducts regular third-party penetration testing, and offers its own AWS misconfiguration scanner called Pump Secure.

Delve customers?

thedelanyohace 4 meses

They're prolly vibe coders.

aservushace 4 meses