Blogs
Cybersecurity Blog
Stay ahead with insights from Red Sentry’s team, covering penetration testing, compliance, and offensive security trends.
Risk Management
Low Severity Doesn’t Mean Low Risk
Severity rates a finding, not a path. How Low and Informational findings combine into real attack paths in a pentest
Penetration Testing
Excessive Permissions Are an Attack Path Multiplier
Access adds up. So does risk
COMPLIANCE
SOC 2 Type II: How to Decide What Technical Testing Your Controls Actually Need
SOC 2 does not require a penetration test. What the criteria actually say, and how to scope technical testing to the controls you are asserting.
Healthcare & Medical Device
HIPAA, FDA Submissions and Customer Security Reviews: Three Different Things Healthcare Software Has to Prove
HIPAA, an FDA premarket submission and a customer security review are three different asks. What each requires, what testing evidences, and where the line is.
Leadership
Five Years of Building Red Sentry; Five Ways I’ve Changed My Perspective.
5 years, 5 shifted mindsets
Valentina Flores
CEO
Application ecosystem · AI/LLM
Testing AI Agents in Production: What Changes When the Model Can Call Your Tools
What changes when an LLM agent can call your tools, where the findings actually sit, what a tester needs before starting, and what to ask a provider for.