Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Complying with the National Cybersecurity Authority Regulations

In this session, Sangmesh Hiremath (Founder Marmin.AI) talks to Venky about how cybersecurity is a crucial driver for their business to expand and grow in Saudi Arabia, the Middle East, and European markets. He shares the steps one can take to comply for business in a country and meet cybersecurity compliance for qualifying for a contract 📄. For any SaaS business that wishes to expand its presence in the above-said markets, an investment of 20mins on this podcast can help you save three months of research on AppSec and Compliance.🔐

OWASP API1: 2019 - Broken Object Level Authorization

Are you leaving your APIs vulnerable to attacks? OWASP revealed that Broken Object Level Authorization is among the top 10 most critical API security risks list. It is number 1 on OWASP API Top 10, 2019. Even large companies like Facebook, Uber, and Verizon, with thousands of engineers and dedicated security teams, have experienced BOLA attacks. Before diving into Broken Object Level Authorization, here are a few terms you’ll need to be familiar with.

Being a Startup Doesn't Save You From Hacking, Nor Does Being on AWS

In this session, John Goecke (CEO) discusses with Venky how everything changed for StratusVue after a ransomware attack in 2018. He shares how the construction industry is a soft target as there is no regulatory oversight, unlike in banking and healthcare, and security is always an afterthought for business owners. Along with all this, he explains complex terms like zero-day, zero-trust, FedRAMP, etc., in a highly rudimentary way.

Disabling Backups! - A Ransomware Story

In this session, John Goecke (CEO) discusses with Venky how everything changed for StratusVue after a ransomware attack in 2018. He shares how the construction industry is a soft target as there is no regulatory oversight, unlike in banking and healthcare, and security is always an afterthought for business owners. Along with all this, he explains complex terms like zero-day, zero-trust, FedRAMP, etc., in a highly rudimentary way.

Explanation of Zero-Day in 3 seconds!

In this session, John Goecke (CEO) discusses with Venky how everything changed for StratusVue after a ransomware attack in 2018. He shares how the construction industry is a soft target as there is no regulatory oversight, unlike in banking and healthcare, and security is always an afterthought for business owners. Along with all this, he explains complex terms like zero-day, zero-trust, FedRAMP, etc., in a highly rudimentary way.

SOC 2 Compliance for SaaS Startups & Top Pitfalls to Avoid | Raghu (Co-Founder, Sprinto)

Overview: In this session, Raghu (Co-Founder, Sprinto) discusses with Venky how SaaS Startups have to upgrade their security standards significantly to become SOC 2 compliant and the major pitfalls they should avoid. He differentiates between SOC 1, SOC 2, & SOC 3 compliance in super-easy terms and highlights some overlapping parameters between security standards like ISO 27001, PCI DSS, HIPPA, GDPR, etc.

Global Actions to Simplify Whitelisting/ Blacklisting Your IPs

We’re excited to announce a new product enhancement to AppTrana called “Global Actions”. This feature allows users to whitelist/ blacklist IPs, IP Ranges, and Countries across all sites. Before we delve into the feature and its advantages for AppTrana users, let’s understand what whitelisting and blacklisting pertaining to IPs/ Countries are and how they can be executed seamlessly using AppTrana.

App Development Companies are Emphasizing Security in Their AMC Contracts | Puneet (Founder, Candor)

In this session, Puneet Miglani (Founder - Candor Technology) discusses with Venky how app development companies are emphasizing security in their AMC contracts. He shares that security is a moving goalpost and a must-have for their customers. Having a security partner helps them provide better services and boost their revenue streams. He even shares the factors one must consider when choosing a security partner to build a long-term sustainable business.

The State of Application Security Q4 2022

The report – “The State of Application Security Q4 2022” is based on a sample size of 1400+ applications. With new threats rising daily, application security is the primary concern for many businesses today. It exposes sensitive information like customer data to the outside world. To benchmark your security program and stay on top of the emerging threat, we conducted an in-depth analysis of application security.

App Security & Compliance for SaaS Companies in Saudi Arabian Market

In this episode of SaaSTrana, host Venkatesh Sundar is joined by Sangmesh Hiremath (Founder of Marmin.AI) to discuss how application security and compliance are crucial for SaaS companies to grow in Saudi Arabia, the Middle East, and the European markets.