Viktar Patotski ·
· Security
· 9 min read Audit fees, compliance platforms, pentests, and the engineering time nobody budgets. A realistic first-year SOC 2 number for a single-product SaaS team under 50 people, with sources.
Viktar Patotski ·
· security
· 10 min read Turning on RDS encryption satisfies the compliance question and stops almost none of the attacks that actually leak data. Here is what each layer of encryption at rest really defends against, on Postgres and AWS, and how to build the one that protects the sensitive field.
Viktar Patotski ·
· security
· 10 min read Environment variables are where secrets go to leak. Here is how to get them out, what each store actually buys you (and costs), and how to wire it into a Spring app without calling an API on every request.