How to check if your company credentials leaked
A practical guide to check if your company credentials leaked: where stolen logins come from, how to search breach and infostealer data safely, and what to do about a hit.
Category
Product
4 posts tagged Product.
Is penetration testing required for SOC 2?
Is penetration testing required for SOC 2? Not by name in the Trust Services Criteria, but auditors expect one to satisfy CC7.1. What to test, and how often.
What a useful dark web monitoring report contains
A CloudKey dark web monitoring report, walked section by section: the open-finding ledger, re-test attestations, and the parts auditors ask for first.
SBOM asset inventory reconciliation in practice
SBOM asset inventory reconciliation maps each signed manifest to the host actually running it, so the CVE queue ranks risk on real systems, not the manifests.