Startup left production AWS keys public for 5 months; their VDP was silent

benzimmermann.dev

4 pointsTerretta2 comments

> The company displays SOC 2 and ISO 27001:2022 certifications on its website, claims least-privilege IAM practices, conducts regular third-party penetration testing, and offers its own AWS misconfiguration scanner called Pump Secure.

Delve customers?

They're prolly vibe coders.

Reply on news.ycombinator.com