Viktar Patotski ·
· Security
· 9 min read Audit fees, compliance platforms, pentests, and the engineering time nobody budgets. A realistic first-year SOC 2 number for a single-product SaaS team under 50 people, with sources.
Viktar Patotski ·
· security
· 10 min read Turning on RDS encryption satisfies the compliance question and stops almost none of the attacks that actually leak data. Here is what each layer of encryption at rest really defends against, on Postgres and AWS, and how to build the one that protects the sensitive field.
Viktar Patotski ·
· security
· 10 min read Environment variables are where secrets go to leak. Here is how to get them out, what each store actually buys you (and costs), and how to wire it into a Spring app without calling an API on every request.
Viktar Patotski ·
· security
· 9 min read The strength question first, then real numbers. Which password hashing algorithm actually protects you, what the current recommendations are, and how to tune each one to a verification time your login path can absorb.
Viktar Patotski ·
· Security
· 11 min read Most breaches are not a code bug. They are a public bucket or an over-broad role nobody reviewed. Here is how to use AI for an expert first pass over your cloud, identity, and infrastructure config, and the tools and guardrails that keep it honest.
Viktar Patotski ·
· Security
· 9 min read AI assistants can now scan your codebase for vulnerabilities and propose patches. Here is how to wire that into a real pipeline, why you still keep a deterministic scanner next to it, and the four places it will lie to you if you let it.