Secure.com

Digital Security Teammates that triage alerts, collect evidence, & close security gaps, so SOC teams move from alerts to resolution faster.

Always on & ready.

[Secure.com @Securedotcom]

Your pen test passed.

Since then:
→ 90 days of code shipped
→ Cloud config drifted
→ IAM unrecognisable from scope

A pen test is a snapshot. Attackers probe live.

The report reflects the old environment.
The breach happens in the new one.

Sign up today for our free yearly continuous Pentesting: https://t.co/TUPhkwut4Z

[Secure.com @Securedotcom]

https://t.co/hdtht3ZXtL

[Secure.com @Securedotcom]

@ZackKorman Nothing says mature security like four tools that don't talk to each other all claiming they'll catch it.

[Secure.com @Securedotcom]

Every year, the best security minds in Europe gather in one place.

This year, our CEO Uzair Gadit will be among them, at ExCeL London on June 2nd for @Infosecurity Europe.

If you're attending and want to talk about where security execution is heading, find him on the floor.

[Secure.com @Securedotcom]

Alert debt doesn't wait for business hours.

3 AM is where the gap between your SOC and your competitor's becomes visible.

[Secure.com @Securedotcom]

Eid isn't a holiday for attackers. It's a window.

Last year, a number of SMEs were breached during long weekends, when inboxes went unwatched, alerts went uninvestigated, and approvals went unsigned.

Lean security teams don't lose to sophistication. They lose to timing.

Our CEO Uzair Gadit spoke to @GulfBusiness about what regional SMEs should be thinking about before the long weekend.

Read the full interview below:
https://t.co/wUyRR9ZdYY

[Secure.com @Securedotcom]

The gap between found and fixed is where breaches actually happen.

Most AppSec teams don't have a discovery problem.
They have a capacity problem.

The fix isn't a better scanner.
It's closing the loop between found and actually verified fixed.

https://t.co/mmsOq8a3PX

[Secure.com @Securedotcom]

Excited to welcome Nicholette Brown Hill to https://t.co/FpH5eBVApe.

Nicholette joins as Founding GM, Americas and Head of Sales, Strategic Markets bringing 20+ years of enterprise sales experience from Rackspace, VMware, and GuardDog AI.

To the security leaders we'll get to partner with: we can't wait to earn your trust.

Welcome to the team, Nicholette. 🎉

[Secure.com @Securedotcom]

@reprise_99 The chaos this would cause in any environment using hostname-based automation or parsing is the real joke. Looks funny until your deployment pipeline starts failing silently

[Secure.com @Securedotcom]

@Grummz Human-in-the-middle is extremely necessary

[Secure.com @Securedotcom]

@IceSolst The source code that matters is the infrastructure and internal tooling. How they manage secrets, how they deploy, what their internal APIs look like. That's in the 4,000 repos.

[Secure.com @Securedotcom]

@k1rallik Search used to retrieve information. Now it’s starting to act on it.

That’s a very different security model.

[Secure.com @Securedotcom]

@EvanLuthra The most believable scam in crypto was apparently the one built by law enforcement.

[Secure.com @Securedotcom]

@kelvinfichter The real vuln was the editor choice all along.

[Secure.com @Securedotcom]

@devploit The attack surface isn’t scaling nearly as fast as the alert velocity around it.

[Secure.com @Securedotcom]

> be GitHub
> trust your dev workflow
> poisoned VS Code extension slips in
> 3,800 internal repos reportedly exposed
> TeamPCP allegedly lists the data for sale
> “verified” still passes
> “trusted” stops meaning safe
> developer laptops are production infrastructure now

Full breakdown ↓

[Secure.com @Securedotcom]

https://t.co/kZZ0cLDwoV

[Secure.com @Securedotcom]

https://t.co/kZZ0cLDwoV

[Secure.com @Securedotcom]

Speed without accountability is just faster risk.

Governance without speed is just slower security.

The answer isn't choosing one.
It's knowing where each belongs.

https://t.co/mmsOq8aBFv

(6/6)

[Secure.com @Securedotcom]

Human-in-the-loop vs Human-in-the-way

Here's a thread to define what it actually means.

(1/6)👇

[Secure.com @Securedotcom]

The AI security industry treats these as the same thing.

They aren't.

One makes your team faster.
The other makes your AI safer.

You need both.

(5/6)