One question : how do you manage database credentials ? That's a question I've had a lot working on my project so I'm pretty sure customers will have the same for you.
Especially given the latest Snowflake security issues.
We do a lot of things to keep the credentials safe that go beyond just putting everything behind a VPN and setting pods' SECCOMP profiles. That obviously includes encrypting credentials and putting in place tight access controls both to the credentials themselves and the encryption keys.
Also, even though we're not SOC2 compliant (yet) we do run pen tests.