Hacker News new | ask | show | jobs
by pmdfgy 702 days ago
Nice explanation and execution. Looks super Pro ! Congrrats !

One question : how do you manage database credentials ? That's a question I've had a lot working on my project so I'm pretty sure customers will have the same for you.

Especially given the latest Snowflake security issues.

1 comments

Yes, that's a great question.

We do a lot of things to keep the credentials safe that go beyond just putting everything behind a VPN and setting pods' SECCOMP profiles. That obviously includes encrypting credentials and putting in place tight access controls both to the credentials themselves and the encryption keys.

Also, even though we're not SOC2 compliant (yet) we do run pen tests.