Blogs
Cybersecurity Blog
Stay ahead with insights from Red Sentry’s team, covering penetration testing, compliance, and offensive security trends.
Penetration Testing
Excessive Permissions Are an Attack Path Multiplier
Access adds up. So does risk
COMPLIANCE
SOC 2 Type II: How to Decide What Technical Testing Your Controls Actually Need
SOC 2 does not require a penetration test. What the criteria actually say, and how to scope technical testing to the controls you are asserting.
Healthcare & Medical Device
HIPAA, FDA Submissions and Customer Security Reviews: Three Different Things Healthcare Software Has to Prove
HIPAA, an FDA premarket submission and a customer security review are three different asks. What each requires, what testing evidences, and where the line is.
Leadership
Five Years of Building Red Sentry; Five Ways I’ve Changed My Perspective.
5 years, 5 shifted mindsets
Valentina Flores
CEO
Application ecosystem · AI/LLM
Testing AI Agents in Production: What Changes When the Model Can Call Your Tools
What changes when an LLM agent can call your tools, where the findings actually sit, what a tester needs before starting, and what to ask a provider for.
Source Code Review
What a Manual Secure Code Review Finds That Your SAST Pipeline Reports as Clean
What a manual secure code review finds that static analysis reports as clean, what a reviewer needs to start, and how to decide whether to scope one.