You Are the CISO Now
You shipped a SaaS product and inherited the security function by default. Five decisions you make once and live with, and what can safely wait.
SERIES
The SaaS Founder's Security Handbook
You shipped a product and inherited a job nobody gave you a title for. This is the path through it: the handful of decisions you make once and live with, the questions your first enterprise buyer will send, and the things you can safely defer. Written for the founder who is now the security function, not for the security team they do not have.
-
-
Tenant Isolation: The Bug That Ends a SaaS Company
One customer seeing another customer's data is the rare failure a SaaS company does not recover from. Where isolation belongs, and what proves it works.
-
Authentication: What to Buy and What to Never Build
Password reset is not where you differentiate. What buying identity actually costs, and the enterprise demand that quietly decides your vendor for you.
-
Secrets, and the File That Reached GitHub
A leaked credential is a problem for exactly as long as it stays valid. Who holds production keys when there are three of you, and what to do first.
-
Production Access for a Team of Three
Least privilege is easy advice for a company with departments. What it means when everyone is an admin because there is nobody else to be one.