I bring "I'm here to do your SOC2 audit" energy
November 18, 2024 at 5:01 PM
I bring "I'm here to do your SOC2 audit" energy
I hate SOC2 / PCI audits so much. FML.
January 7, 2026 at 4:13 PM
I hate SOC2 / PCI audits so much. FML.
Because we renewed our SOC2 recently, I took a moment to reflect on how engineers view compliance and where its value truly comes from. authzed.com/blog/2024-so...
Our SOC2 Renewal and Reflections on Compliance
I'm happy to announce that AuthZed recently renewed our SOC2 compliance and our SOC2 Type 2 and SOC3 reports are now available on security.authzed.com.
Having just endured the audit process again, I f...
authzed.com
January 16, 2025 at 10:57 PM
Because we renewed our SOC2 recently, I took a moment to reflect on how engineers view compliance and where its value truly comes from. authzed.com/blog/2024-so...
SOC2-ah comply on that thang
March 23, 2026 at 7:12 PM
SOC2-ah comply on that thang
Someone* needs to write this but for T&S if it hasn’t already been done www.latacora.com/blog/2020/03...
(And one of the ~seven is probably “have a plan for handling off-platform harassment)
* I am really tired but would be interested in contributing to such an effort
(And one of the ~seven is probably “have a plan for handling off-platform harassment)
* I am really tired but would be interested in contributing to such an effort
The SOC2 Starting Seven
The SOC2 Starting Seven
www.latacora.com
December 14, 2024 at 12:38 AM
Someone* needs to write this but for T&S if it hasn’t already been done www.latacora.com/blog/2020/03...
(And one of the ~seven is probably “have a plan for handling off-platform harassment)
* I am really tired but would be interested in contributing to such an effort
(And one of the ~seven is probably “have a plan for handling off-platform harassment)
* I am really tired but would be interested in contributing to such an effort
not having email is SOC2 compliant
January 16, 2025 at 4:47 PM
not having email is SOC2 compliant
SOC2やISO27001などの認証取得を効率化できるオープンソースのGRCプラットフォームらしい
セキュリティ管理や監査の自動化をセルフホストで試したいときに使えそうかな
yug1224 starred getprobo/probo
https://github.com/getprobo/probo
セキュリティ管理や監査の自動化をセルフホストで試したいときに使えそうかな
yug1224 starred getprobo/probo
https://github.com/getprobo/probo
GitHub - getprobo/probo: Open source solutions for SOC2, GDPR, and ISO27001
github.com
September 26, 2026 at 4:26 PM
SOC2やISO27001などの認証取得を効率化できるオープンソースのGRCプラットフォームらしい
セキュリティ管理や監査の自動化をセルフホストで試したいときに使えそうかな
yug1224 starred getprobo/probo
https://github.com/getprobo/probo
セキュリティ管理や監査の自動化をセルフホストで試したいときに使えそうかな
yug1224 starred getprobo/probo
https://github.com/getprobo/probo
github.com/getprobo/probo
GitHub - getprobo/probo: Open source solutions for SOC2, GDPR, and ISO27001
GitHub - getprobo/probo: Open source solutions for SOC2, GDPR, and ISO27001
GitHub - getprobo/probo: Open source solutions for SOC2, GDPR, and ISO27001
github.com
September 26, 2026 at 5:27 PM
github.com/getprobo/probo
GitHub - getprobo/probo: Open source solutions for SOC2, GDPR, and ISO27001
GitHub - getprobo/probo: Open source solutions for SOC2, GDPR, and ISO27001
This is all just digital duct tape, but it’ll pass a SOC2 audit.
March 14, 2024 at 9:50 PM
This is all just digital duct tape, but it’ll pass a SOC2 audit.
oh they STOLE their fraudulent soc2 software? lmao
March 31, 2026 at 8:28 PM
oh they STOLE their fraudulent soc2 software? lmao
No, I cannot, in good faith, recommend that you lay-off half of your key stakeholders in the middle of your SOC2 audit.
February 12, 2024 at 4:11 PM
No, I cannot, in good faith, recommend that you lay-off half of your key stakeholders in the middle of your SOC2 audit.
Laravel Cloud is SOC2 Type 1 compliant now 🫡
blog.laravel.com/laravel-clou...
blog.laravel.com/laravel-clou...
Laravel Cloud achieves SOC 2 Type 1 Compliance - The Laravel Blog
SOC 2 Type 1 compliance achieved with SOC 2 Type 2 coming soon for Laravel Cloud as well as Laravel Forge and Laravel Nightwatch.
blog.laravel.com
March 26, 2025 at 3:07 PM
Laravel Cloud is SOC2 Type 1 compliant now 🫡
blog.laravel.com/laravel-clou...
blog.laravel.com/laravel-clou...
Scale faster with YOUR private AI infrastructure. 14 agents. Quantum encryption. Self-healing security. SOC2/GDPR audit trail. API-first. Early adopter pricing. Limited beta.
https://www.youtube.com/@NovaOSSpaceAI
#NovaOS #Enterprise #CyberSecurity
https://www.youtube.com/@NovaOSSpaceAI
#NovaOS #Enterprise #CyberSecurity
September 22, 2026 at 9:00 PM
Scale faster with YOUR private AI infrastructure. 14 agents. Quantum encryption. Self-healing security. SOC2/GDPR audit trail. API-first. Early adopter pricing. Limited beta.
https://www.youtube.com/@NovaOSSpaceAI
#NovaOS #Enterprise #CyberSecurity
https://www.youtube.com/@NovaOSSpaceAI
#NovaOS #Enterprise #CyberSecurity
When I'm deeply bored, such as when I'm updating a billion SOC2 protocol items, I'll end up stimming by singing the Map Men theme under my breath over and over again.
Map men
Map men
Map map map
Men men
Map men
Map men
Map map map
Men men
March 10, 2026 at 1:22 PM
When I'm deeply bored, such as when I'm updating a billion SOC2 protocol items, I'll end up stimming by singing the Map Men theme under my breath over and over again.
Map men
Map men
Map map map
Men men
Map men
Map men
Map map map
Men men
I loathe peer reviews, loathe, why the fuck are they part of soc2, LOATHE
January 17, 2025 at 5:04 AM
I loathe peer reviews, loathe, why the fuck are they part of soc2, LOATHE
When you see a one person startup claiming to be SOC2 compliant
a man in a suit and tie is laughing with his mouth open
ALT: a man in a suit and tie is laughing with his mouth open
media.tenor.com
November 4, 2024 at 8:41 PM
When you see a one person startup claiming to be SOC2 compliant
Absolutely does not help, but even a really good SOC2 audit or whatever isn't enough to give the kind of assurance that I'd personally like.
January 1, 2026 at 6:48 PM
Absolutely does not help, but even a really good SOC2 audit or whatever isn't enough to give the kind of assurance that I'd personally like.
Pro-Tip: If your organization does SOC2, HITRUST, ISO27k, etc... do yourself a solid and talk to your security/compliance folks *before* changing tools or cancelling subscriptions.
February 15, 2024 at 8:55 PM
Pro-Tip: If your organization does SOC2, HITRUST, ISO27k, etc... do yourself a solid and talk to your security/compliance folks *before* changing tools or cancelling subscriptions.
We send each other questionnaires. We all hate the questionnaires. We get third parties to certify that at the very least we have some minimal security practices (SOC2) and policies and up-to-date fire extinguishers (ISO 27001) and that someone has at least run some kind of pen testing.
January 1, 2026 at 6:35 PM
We send each other questionnaires. We all hate the questionnaires. We get third parties to certify that at the very least we have some minimal security practices (SOC2) and policies and up-to-date fire extinguishers (ISO 27001) and that someone has at least run some kind of pen testing.
The post discusses a conflict between SOC2 and NIST guidelines on password change intervals. NIST no longer recommends frequent forced password changes but SOC2 suggests them. The poster is questioning whether to abandon NIST's practices for a required SOC2.
r/cybersecurity
View discussion on Reddit.
reddit.com
December 31, 2024 at 10:42 AM
The post discusses a conflict between SOC2 and NIST guidelines on password change intervals. NIST no longer recommends frequent forced password changes but SOC2 suggests them. The poster is questioning whether to abandon NIST's practices for a required SOC2.