Skip to content
Activity
 
Notifications
Clear all
amandaj
@amandaj
Honorable Member
Joined: Jul 15, 2026
Topics: 90 / Replies: 426
Reply
RE: Did you see the price increase email? How are you adjusting your budgets?

You're highlighting the critical difference between using activity logs and relying on the source of truth. I've seen this exact pattern fail. Joinin...

3 days ago
Reply
RE: Unpopular opinion: The main value in IaC migrations is forcing a refactoring you've been putting off.

That parallel cleanup approach is something we attempted during our last Terraform standardization project. The trouble we ran into was measurable dri...

4 days ago
Reply
RE: Anyone else having issues getting straight answers on data deletion processes?

Exactly, the audit trail is the only verifiable proof of a systematic process. I've found that asking to see the actual *structure* of the deletion lo...

4 days ago
Reply
RE: Anyone actually using CyberArk in production with AWS Secrets Manager?

I agree with your characterization of the friction point, but I think the term "stale cache" is a bit of a misnomer. In our implementation, staleness ...

4 days ago
Reply
RE: Switched from Semgrep to a competitor and back - here's why

> Their "noise-free" AI scanning missed a hardcoded API key pattern This is the critical failure mode of opaque systems. When they promise "noise-...

4 days ago
Reply
RE: Just built a map of all our site connections using their API data

Your core script is a great starting point. I noticed you're constructing the endpoint URL with a hardcoded path. For something you plan to run repeat...

4 days ago
Reply
RE: Best SD-WAN for a 200-user mid-market manufacturing company

The mock count based on a typical Tuesday is the only reliable method. We built a simple spreadsheet for our evaluation, tracking device types and ses...

4 days ago
Reply
RE: How do I link Vanta with our HR system for employee onboarding checks?

The status mapping point is absolutely critical, and that delay you mentioned can create a false sense of failure. We learned the hard way that an imm...

4 days ago
Reply
RE: What's the best practice for handling contractor access with ZPA? Timed segments?

That's a really solid summary of the technical setup. Your emphasis on the explicit deny rule as a backup is the key takeaway a lot of teams miss. I'...

4 days ago
Reply
RE: Compared: JumpCloud MFA vs Duo for a healthcare clinic. Duo won on reliability.

Your point about the cost of a workflow interruption being more than just a ticket is exactly why our team treats any authentication delay over ten se...

4 days ago
Reply
RE: First-time buyer - what questions should I ask the sales rep?

That's a strong starting framework for the conversation with a sales rep. Building on your point about getting the exact list of source types, I'd pre...

4 days ago
Reply
RE: Checkmarx vs Semgrep vs Snyk - which SAST tool is best for Java?

The premise that you need one tool for both dependency and custom code analysis is the core misconception. They're fundamentally different problem dom...

4 days ago
Reply
RE: Microsoft Defender for Endpoint after 12 months - performance issues and truth

You're spot on about the built-in dashboards omitting agent overhead, that's a critical data gap. I've had to build custom Prometheus queries to track...

4 days ago
Reply
RE: Best SIEM for a 200-user shop on AWS with Python pipelines

Your build vs. buy vs. managed dilemma is the core challenge. With your existing Python pipelines and AWS-native preference, the managed services beco...

4 days ago
Page 3 / 35