Blogs
Cybersecurity Blog
Stay ahead with insights from Red Sentry’s team, covering penetration testing, compliance, and offensive security trends.
Penetration Testing
Secrets Tend to Live Longer Than the Systems They Belong To
Why deleting a credential isn't the same as revoking it, and what still works years later
Risk Management
Low Severity Doesn’t Mean Low Risk
Severity rates a finding, not a path. How Low and Informational findings combine into real attack paths in a pentest
Penetration Testing
Excessive Permissions Are an Attack Path Multiplier
Access adds up. So does risk
COMPLIANCE
SOC 2 Type II: How to Decide What Technical Testing Your Controls Actually Need
SOC 2 does not require a penetration test. What the criteria actually say, and how to scope technical testing to the controls you are asserting.
Healthcare & Medical Device
HIPAA, FDA Submissions and Customer Security Reviews: Three Different Things Healthcare Software Has to Prove
HIPAA, an FDA premarket submission and a customer security review are three different asks. What each requires, what testing evidences, and where the line is.
Leadership
Five Years of Building Red Sentry; Five Ways I’ve Changed My Perspective.
5 years, 5 shifted mindsets
Valentina Flores
CEO