Pangea

Most developers know that writing authorization code is painfully hard. For starters, most existing #AuthZ tools require commitment to either RBAC or ReBAC. That eventually becomes a problem when applications mature and grow in use cases. The code explodes in complexity since developers have to reverse engineer the boundaries of their entire application and then design how, when, and where to enforce them. Pangea is here to solve that problem. Today, we just launched our new AuthZ service on Product Hunt, where developers can add fine-grained relationships and policies in minutes that scale with #compliance needs. Our goal is to help developers ensure that the right users have the right access to the right parts of their app at the right time. To summarize, here is what makes Pangea AuthZ special: → Meet your current needs without blocking you from meeting later needs with a simple path from #RBAC to #ReBAC → Add ABAC policies that record the context of the user, their request, or even the resource they are interacting with (leveraging other Pangea services) → Leverage Pangea’s #AuthN service to provide a high assurance level around the user and their identity → Centrally create, maintain, reuse, and audit your access policies across every app without policy sprawl and drift. Check out the link in the comments for a special offer on Pangea AuthZ. #SecureByDesign #SecDevOps #CyberSecurity

Adopting Secure by Design principles is essential when developing software and apps. This approach can help teams achieve a 20% faster time to market with pre-built security features, streamline app compliance for GDPR, SOC2, PCI, HIPAA and ISO2700, reduce security tech debt and maintenance costs and so much more. Learn how tonight (8/8, doors open 7 PM) at our co-hosted happy hour at LevelUp in MGM Grand with Semgrep, Impart Security Inc. and Pangea. We invite all #cybersecurity industry professionals attending Security BSides Las Vegas, BlackHat or #DefCon32. RSVP = https://lnkd.in/gPV_p7gG #CyberSecurity #DevOps #SecureByDesign #BHUSA #BlackHat2024

A great (and funny) summary from Firebase on the six reasons why professional developers become unhappy, based on Stack Overflow's recent 2024 Developer Survey. Watch = https://lnkd.in/eyJMq8NE #DevOps #CyberSecurity #SecureByDesign

What a night! Thanks be to Joe Sullivan, Feross Aboukhadijeh and Christina Cacioppo for facilitating the Secure by Design and how to build a Secure SDLC discussion. If you missed us, we're still in Vegas through the week. Let's connect > > https://lnkd.in/eaXnZ8DJ #SecureByDesign #CyberSecurity #BHUSA #BlackHat2024 Vanta Socket Pangea

🏁 Our team is on the ground in Vegas this week and excited for our events! CEO, Oliver Friedrichs, started the day off strong in a panel discussion with Kumar Saurabh, Snehal Antani, and Sid Trivedi. Up next, we are hosting 2 executive events TODAY that you can't miss so RSVP ASAP to claim your spot❗ 🍔 Secure by Design Luncheon with Amazon Web Services (AWS) Decibel Partners - “Can AI-Generated Code be Secure by Design? TODAY August 7 @ 12 noon: https://lnkd.in/gK_vUqmU 🍽 Secure by Design Dinner with Joe Sullivan (former CSO Cloudflare, Uber, Facebook), TODAY August 7 @ 6pm: https://lnkd.in/gmiJUbhV Can't make it today, join our happy hour tomorrow: 🍻 Happy Hour with Semgrep and Impart Security Inc. - “LevelUp Your Security” TOMORROW August 8 @ 7pm: https://lnkd.in/guBTV5hv We can't wait to meet with you all!

GitLab recently revealed a survey on the tension with AI, security, and developer productivity within organizations. Companies are shipping code twice as fast YoY, and using #AI during the #SDLC. However, ~50% of leaders and practitioners are concerned with the security behind generated code. ❓ So the biggest question is ❓ "How do we accelerate software development to meet demands while maintaining security posture?" #GitHubCopilot has become the main source of code generation for millions of developers to accelerate their production. In fact, they recently announced their "Extensions" feature where devs can get context, perform actions, and generate files and pull requests on external tools. This feature is revolutionary since practitioners can prompt Copilot to secure their code, whether to redact sensitive text, create tamperproof audit logs, or add #authorization to their apps. If your team is questioning how to ship code faster with AI while keeping your app secure, try the Pangea GitHub Copilot Extension, and simply prompt "How do I redact sensitive info from some text?"

For nearly a decade, the good folks at Let's Encrypt have been improving online security by providing billions of free #TLS certificates. Consider supporting their incredible work with a donation > > https://lnkd.in/gh5gNNe #CyberSecurity #Data #Privacy #OpenSource

CI/CD pipelines are essential for agile app development, but they often possess a hidden security weakness: the secrets they hold 🤐 By "secrets" we mean any credentials, API keys, encryption keys, and certificates. 🔑 The scale and complexity of CI/CD systems increase the risk of secret exposure, whether provided in the cloud, self-hosted in a cloud environment, or on-prem. Our article breaks down: - the scenarios where secrets are present in CI/CD - risks with improper handling - mitigation strategies for DevOps engineers and developers. Written by Jim Hoagland, PhD researcher with over 30 years of experience in the cybersecurity industry. Access using the link in comments. #CICD #DevOps #encryption #PipelineSecurity

📣 Security Leaders! Join peers and experts at the exclusive Secure by Design Dinner. Learn from Joe Sullivan, Oliver Friedrichs, Feross Aboukhadijeh and Christina Cacioppo about building secure software from the ground up. 📅 Aug 7th, 6PM @ Bardot Brasserie, ARIA Resort.  RSVP to secure your spot (link in comments) Hosted by Vanta, Socket and Pangea. #CyberSecurity #SecureByDesign

As millions of developers embrace AI-powered code tools, the role of security leaders in ensuring #SecurebyDesign software is more critical than ever. Join us on August 7 at Mandalay Bay for our Secure by Design Luncheon. Co-sponsored by Amazon Web Services (AWS), Pangea, and Decibel Partners, this event offers a unique opportunity to discuss AI code generation, and shift-left security approaches, including composable security and code scanning, over a catered lunch. Don’t miss out—RSVP now using the link in the comments! #SecurityConference #CyberSecurity #SecurityLeadership #SecurebyDesign