{"repo":"forter/security-101-for-saas-startups","free":true,"listed":false,"github":"https://github.com/forter/security-101-for-saas-startups","clone":"git clone https://github.com/forter/security-101-for-saas-startups.git","description":"security tips for startups","language":null,"stars":4649,"topics":["security-considerations","startup","security","chinese"],"license":null,"category":"security-tools","readme_excerpt":"中文翻译 Security 101 for SaaS startups Things I wish my first boss had told me So you are working at a startup, and you have been wondering at what point should you start looking into security considerations and compliance? Which technical debt should be postponed for a later stage, and which systems should be hardened this instant? What are the main considerations? Technical debt gets piled up, and in many cases it is easier to pay later rather than now. For example, if you are using ElasticSearch without username/passwords, you should double check your firewall settings. After round-B your startup would probably have the manpower and budget to properly secure the ElasticSearch cluster. Startup culture is a bit more difficult to change \"later\". Let's take a trivial example. Developers that are used to pushing code without code review, would complain that peer review would bog down the development, and it might even smell \"too corporate\" for them. So which security considerations are relevant at an early stage? What security concerns were raised by customers willing to pay for your product? What are the security expectations in your industry (Medical, Finance, Enterprise)? What are the target market (country) regulations (Data Privacy, Data Residency)? Europeans are known to have tougher regulations. Different US States have different regulations. Which tools and policies would not hurt your team's morale. How long would it take you to prepare a security risk plan (see example a","default_branch":null,"files":null,"tree":[],"storefront":"/r/forter","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/forter/security-101-for-saas-startups/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}