Hacker News Reader

My company uses http://appcanary.com and recently GitHub has introduced a similar feature https://github.com/blog/2470-introducing-security-alerts-on-...

View on HN

I searched and I did not know about them. Thanks for letting me know. These are actually the first paying service I have seen on this (at least the server side, I had seen it for webapps).

I'll probably start out with Java/Scala on the webapp side and on the server side I'm thinking of an easy to use support for Kubernetes and Rancher OS. If that's more around your ally subscribe there on the website or here.

I'm curious on what is your company, regardless, any pain points that you might have noticed while using AppCanary, or suggestions on SecureIT?

Usually they would like to install a daemon which checks local packages and all Gemfiles for example. The problem would be in ensuring that the daemon does not misbehave. A solution which gets integrated into a CI/CD pipeline would not have this problem but it would not be able to provide assurance on the integrity of the base system, only the artefact (deliverable).

CI/CD or even the CVS repository (Git e.g.) - as a hook or with full access is on the lines I'm thinking about. Thanks & Cheers!

Reply on news.ycombinator.com