Latacora collects and analyzes data about services our clients use. You may have read about our approach to building security tooling, but the tl;dr is we make requests to all the (configuration metadata) read-only APIs available to us and store the …

One of our favorite blog posts is our “crypto right answers” post. It’s intended to be an easy-to-use guide to help engineers pick the best cryptography choices without needing to go too far down a rabbit hole. With post-quantum …

This post is the first in a series about logging and audit trails from a security perspective. At Latacora, we bootstrap security practices. We partner with companies that frequently have minimally developed security programs, work with them to …

So, you plan to sell your startup’s product to big companies one day. Congratu-dolences! Really, that’s probably the only reason you should care about this article. If that’s not you, go forth and live your life! We’ll ask no more of your time. For …

This post is the second in a series about logging and audit trails from a security perspective. If you’re looking to level up your security practices, logging is a good place to focus your attention. Just as logging is a core pillar of observability, …

If you’re dealing with Vendor Security Questionnaires (VSQs), you know they can be a real headache. That’s where Repliance comes in. They’re not just another tech platform, they’re a full-service solution that takes the entire …