News for hackers. Stuff that matters.

A comment on Launch HN: Datree (YC W20) – Best practices and security policies on each commit.

Re:Launch HN: Datree (YC W20) – Best practices and security ... by cddotdotslash on Tuesday March 10, 2020 @03:36PM (#22538769)
This is really awesome! One area I'd recommend looking into is automated scanning of cloud infrastructure templates (Terraform, CloudFormation, Troposphere, ARM Templates, etc.) These get pushed to source control all the time and often contain tons of policy violations.

The pricing feels a bit steep, especially considering that it's 3.5x the cost per user of GitHub itself ($8 vs $28) but I suppose most enterprises wouldn't mind at their scale compared to the cost of a breach.

[ Parent | on HN ]
Re:Launch HN: Datree (YC W20) – Best practices and security ... by eyarz on Tuesday March 10, 2020 @03:47PM (#22538876)
We do support Terraform, CloudFormation and ARM Templates because those are all structured files. Unlike your source control, we are doing heavy compute processing every time a new PR created, so our costs are higher...
[ Parent | on HN ]