As part of an ongoing series, we’re taking a look at security for small business, the tools that are available, and the best practices that keep your business ahead of the curve.
Tozny’s CEO, Isaac Potoczny-Jones, will be presenting at the High Confidence Software and Systems Conference (HCSS) on May 9, 2017. Come learn about NIST’s Risk Management Framework and how you can apply it to your work. And if you happen to be out in Annapolis, meet up with Isaac at the conference! @SyntaxPolice Applying NIST’s New Privacy Risk Management Framework …
This past month, we’ve covered four different crypto tools for devops, how developers can use them, and potential drawbacks intrinsic to each approach.
The Java KeyStore allows developers to store keys and credentials needed from an application-level securely from within the JDK.
HashiCorp Vault is a tool for managing much more than simple secrets. Vault also supports revoking keys, regenerating credentials, auditing access, and “leasing” credentials for a limited period of time.
To keep up in today’s competitive technology market, perfecting the user experience is a must; making added security measures a tough sell to leadership. We consistently see brands sacrifice security, adopting the attitude, ‘it won’t happen to me.’ But when it does (which it will), brands are unprepared and scrutinized for their lack of foresight. Read the interview with Manuela …
The key advantage of using git-crypt is that your protected data stays alongside the code that uses it. You don’t need to configure or manage additional infrastructure.
Credstash is a fantastic tool that allows sharing secrets between developers and servers or even among development teams.
These end-to-end encryption tools help protect your data by ensuring only the parties at either end of the communication can read or use the message. They are a first step to ensuring your data and messages remain safe and secure.
JOSE is a solid standard. It’s been implemented widely and successfully by awesome protocol engineers, cryptographers, and developers.