State of Startup Application Security with Luca Carettoni

Show notes

Key Topics on Access Control Podcast: Episode 3 – An Insider's View on Startup Security from Luca Carettoni

Pentesting is an authorized simulated cyberattack on a computer system, performed to evaluate the security of the system.
It's important how you react to a security compromise rather than always trying to prevent a compromise.
Doyensec provides product security testing services primarily in the application security space.
A startup should address security internally if possible, and if not, outsource.
Security hires should be made depending on the company's particular security priorities.
The technologies you choose have a big impact on potential security risks.
Among the top vulnerabilities witnessed are deserialization vulnerabilities (such as Java deserialization) and Server-Side Request Forgery.