@potato.softwarewrite down, somewhere your co-founder can find it without you, what to do if you lose access to your own accounts.
not paranoia, just the same reason you’d tell someone where the spare key is.
#TryPostern #founders #accelerator #potatosecurity #policy #startup #business
@trypostern.bsky.socialwrite down, somewhere your co-founder can find it without you, what to do if you lose access to your own accounts.
not paranoia, just the same reason you’d tell someone where the spare key is.
#TryPostern #founders #accelerator #cybersecurity #policy #startup #business
@trypostern.bsky.socialif you take payments, know exactly what "PCI compliance" your payment processor is handling for you versus what's actually still on you.
most founders assume it's 100% handled. it usually isn't.
#TryPostern #buildinpublic #startups #vc #founder #cyber #infosec #PCI #security
@trypostern.bsky.social#OneThingThisWeek: walk through your product's password reset flow once, end to end, as if you were trying to break into your own account.
most early-stage products have never had anyone actually try this. #TryPostern #startupsecurity #accelerator #startup #cybersecurity #infosec #password
@trypostern.bsky.socialif you're using AI coding agents, check what permissions/scopes they actually have, not what you assumed they had.
agents tend to get given more access than anyone means to, because narrowing it down takes an extra step nobody takes.