Production Access for a Team of Three
Least privilege is easy advice for a company with departments. What it means when everyone is an admin because there is nobody else to be one.
TOPIC
SaaS Security
Security for the people building SaaS, not the ones overseeing it. What to decide before your first customer, what your first enterprise buyer will ask for, and what you can safely leave until later.
Articles
Secrets, and the File That Reached GitHub
A leaked credential is a problem for exactly as long as it stays valid. Who holds production keys when there are three of you, and what to do first.
Authentication: What to Buy and What to Never Build
Password reset is not where you differentiate. What buying identity actually costs, and the enterprise demand that quietly decides your vendor for you.
Tenant Isolation: The Bug That Ends a SaaS Company
One customer seeing another customer's data is the rare failure a SaaS company does not recover from. Where isolation belongs, and what proves it works.
You Are the CISO Now
You shipped a SaaS product and inherited the security function by default. Five decisions you make once and live with, and what can safely wait.
Key terms
An access model where permissions attach to named roles, and people get permissions by holding a role, rather than being granted access one item at a time.
A database feature that decides which rows a query is allowed to return based on who is asking, enforced inside the database rather than by application code.
How an organization stores, distributes, rotates, and revokes the credentials its systems need to run: API keys, database passwords, signing keys, and tokens.
An independent auditor's report on how a service organization controls customer data, assessed against the AICPA's trust services criteria. Not a certification.
A machine-readable inventory of every component in a piece of software, including dependencies you never chose directly, in a standard format buyers can consume.
The controls that stop one customer's data in a multi-tenant product from ever reaching another customer, regardless of what the application code does.