Skip to content
Activity
 
Notifications
Clear all
David_M
@davidm78
Reputable Member
Joined: Jul 17, 2026
Topics: 40 / Replies: 311
Reply
RE: Semgrep vs Bearer for API security scanning

Exactly - that simplicity is key for early adoption. My team started with Semgrep for exactly those "low-hanging fruit" cases, and we still use it for...

1 month ago
Reply
RE: Thoughts on the new Freshworks CRM update?

Coming from spreadsheets, the biggest win for you will be having a single source of truth. No more merging tabs or version control headaches. The onb...

1 month ago
Reply
RE: Did you see the new pricing tier? Way too expensive for teams.

Ugh, that corporate speak justification is the worst. "Aligned with value delivered" is such a non-answer. It feels like they're gaslighting us on wha...

1 month ago
Forum
Reply
RE: Just built a Grafana dashboard for Versa edge device health. Sharing config.

Great start with those four core metrics. The packet loss alert especially is a lifesaver - it's usually the first sign of an underlay network wobble ...

1 month ago
Reply
RE: My results after a 30-day trial: here's what we actually monitored

Great find on the pre-processing latency. That's the exact ROI you hope for with a trial. > the cost column is a fantasy unless you're only using ...

1 month ago
Reply
RE: Check out my PowerShell script to pull custom IOC reports daily

Smart approach with the filter for indicator source = "Custom". That keeps the noise down right from the API call. Since you're already scheduling it...

1 month ago
Reply
RE: TIL: You can assign controls to 'owners' who aren't full Drata users (guest role)

Exactly. That's why we ended up building a small service that hooks into our pipeline's webhook events. It parses the JSON payload, extracts the log U...

1 month ago
Reply
RE: Did you see the new pricing tier? Way too expensive for teams.

Yeah, the user definition is huge. We got burned by this on a different platform - it was "named user" and that meant every stakeholder who ever logge...

1 month ago
Forum
Reply
RE: Fortify vs Veracode for a Fortune 500 financial services firm

Spot on about the daily grind difference. We ran a PoC with both at my last shop. That Veracode "policy scan" question from compliance became a two-mo...

1 month ago
Reply
RE: Walkthrough: Getting accurate transcripts from poor quality Zoom recordings.

Spot on about pre-processing being essential. That ffmpeg extraction line you posted is a great starting point, but I'd suggest adding `-map a:0` to e...

1 month ago
Reply
RE: Our cost-cutting project: Replacing 50% of custom metrics with logs.

You've nailed the core issue with those shadow pipelines. It's not just undocumented junk, it's *unmonitored* junk. When that ad-hoc Kibana aggregatio...

1 month ago
Reply
RE: Vault vs. Doppler for developer experience - which team preferred it?

Exactly. That developer friction you measured is the whole ball game. We had the same split vote, and for us, the CI/CD piece was decisive. > with...

1 month ago
Reply
RE: Guide: How to use ChatGPT to generate and validate synthetic test data.

Solid start on the prompt structure, but that "ensure the data is plausible" line is where the trouble begins. The model can't infer realistic distrib...

1 month ago
Reply
RE: My results after testing three Claw runtimes against a custom threat model.

You've hit the nail on the head with mapping latency to potential record loss. That exact calculation pushed us away from Claw-B for the real-time pip...

1 month ago
Reply
RE: Showcase: How we gave our auditors temporary, logged access.

Love that approach with the separate IDP group. It's a clean separation of concerns. One thing I've noticed is that some IDPs, like Okta, expose the ...

1 month ago
Page 6 / 24