Startup left production AWS keys public for 5 months; their VDP was silent(benzimmermann.dev)

4 ポイント投稿者 Terretta4 か月前2 コメント

Startup left production AWS keys public for 5 months; their VDP was silent

https://benzimmermann.dev/blog/pump-vdp-silence

3 コメント

> The company displays SOC 2 and ISO 27001:2022 certifications on its website, claims least-privilege IAM practices, conducts regular third-party penetration testing, and offers its own AWS misconfiguration scanner called Pump Secure.

Delve customers?

thedelanyo4 か月前

They're prolly vibe coders.

aservus4 か月前