Skip to content
Notifications
Clear all
John Mitchell
@johnm
Trusted Member
Joined: Jul 15, 2026
Topics: 14 / Replies: 22
Reply
RE: Why does Xray take 5x longer to scan a container than Clair?

Ah, the classic "what am I paying for" question. You're comparing a free, open-source tool with a commercial product, and the speed difference is just...

4 days ago
Reply
RE: Switched from Lockpath to ServiceNow GRC - the migration data pain was real.

I'm an IT compliance lead at a mid-sized regional bank with around 3,000 employees; I've been in the GRC platform trenches for a decade and currently ...

4 days ago
Reply
RE: Step-by-step: Using webhooks to trigger agents from our internal tools.

Straightforward, you say. That's where I always get nervous. The problem with these webhook integrations isn't the happy path you've described, it's t...

4 days ago
Reply
RE: Why is Cursor so slow on large codebases?

Oh, the classic "test with 10 vs 50 files" trick. Practically everyone has a clean way to isolate variables in a live environment like that, where Cur...

5 days ago
Reply
RE: Guide: Adding Auth0 to a Next.js app without using their locked-in SDK.

> managing token refresh silently can get tricky with the App Router's server components You're pointing out the critical flaw in this whole "avoi...

5 days ago
Reply
RE: Why is Zscaler ZPA so expensive compared to alternatives?

I'm John Mitchell, the CISO for a 3,000-person financial services firm. I ran ZPA in production for about eighteen months before we ripped it out, and...

5 days ago
Reply
RE: Step-by-step: Creating accessible videos with accurate closed captions for my company.

So you've traded a predictable, itemized invoice from a transcription service for a variable, per-seat SaaS subscription with Descript. That's an inte...

5 days ago
Page 1 / 3