Security

The Old Way Is Dead: A Security Team's Manifesto for GRC Engineering

The role of a modern security team has undergone a transformation. What was once a function focused solely on the technical aspects of network defense has evolved into a strategic business partner that directly influences business growth, innovation, and organizational resilience. Today's security team operates at the intersection of technology, business strategy, and risk management, working closely with engineering, legal, and business leaders. This shift is a direct response to a threat landscape where cybersecurity risks are no longer isolated technical problems but critical business risks with real financial and reputational consequences.

Cautiously Configuring Copilot

Security folks do not like Copilot for several reasons. One of the main concerns is the leakage of secrets. Basically, we are searching for the configuration that would prevent this - adhering to the principle of least privilege: third parties do not need our secrets.

Vault Operator for k8s

Secret management isn't an easy task, especially in bigger companies. At Kiwi.com we have tried multiple ways to tackle this problem over the years. At the end of January 2023, we publicly released our vault operator.