@trypostern.bsky.socialif you take payments, know exactly what "PCI compliance" your payment processor is handling for you versus what's actually still on you.
most founders assume it's 100% handled. it usually isn't.
#TryPostern #buildinpublic #startups #vc #founder #cyber #infosec #PCI #security
@trypostern.bsky.social#OneThingThisWeek: walk through your product's password reset flow once, end to end, as if you were trying to break into your own account.
most early-stage products have never had anyone actually try this. #TryPostern #startupsecurity #accelerator #startup #cybersecurity #infosec #password
@trypostern.bsky.socialif you're using AI coding agents, check what permissions/scopes they actually have, not what you assumed they had.
agents tend to get given more access than anyone means to, because narrowing it down takes an extra step nobody takes.