Security automation
As a cofounder of Detexian I have deep experience in building software in the security space. I can build integrations with APIs to automate security processes or instruct your team how to go about it. I can also help you implement security best practices in your CI/CD pipelines, including dependency scanning, secret management, and infrastructure hardening.
Through my industry connections, I can also help you find experts to help you with assessing your security posture and identify issues that need addressing before automating those processes for you. Common candidates would be helping you get your on- and offboarding under control to make sure that nobody has access beyond their tenure in your organisation or cannot get started because they have not been given access in time.
What you get
- Dependency, secret, and container scanning in CI
- Hardened build and deploy pipelines
- Infrastructure baselines as code
- Evidence you can hand to an auditor
How it works
-
01
Audit
Where the real exposure is, not a generic checklist.
-
02
Automate
Checks wired into the pipeline so they cannot be skipped.
-
03
Maintain
Alerting and review so findings get fixed, not filed.