/ /⠀GET IN TOUCH
Let’s talk about your cybersecurity product
Let’s talk about your cybersecurity product
Leave your details and we’ll follow up to discuss your priorities and how Security Flair can help.
We'll use your details to respond to your inquiry. See our Privacy Policy
Ledgerline and its co-founder Maya Chen are fictional, created for this sample.
// SOCIAL
Brand and founder posts for a data security startup
X post 1: quick tip (brand account)
Want to know which of your S3 buckets are public through their bucket policy? ⌨️
aws s3api get-bucket-policy-status --bucket <name>
Loop it over aws s3 ls for a quick first pass. ACLs need their own check, but it's a start.
We ran it on our own test org and found a bucket called tmp-delete-me from 2022. It was not deleted 🙃
aws s3api get-bucket-policy-status --bucket <name>
Loop it over aws s3 ls for a quick first pass. ACLs need their own check, but it's a start.
We ran it on our own test org and found a bucket called tmp-delete-me from 2022. It was not deleted 🙃
X post 2: question for the audience (brand account)
You're handed a laptop on day one at a new job. Security team is just you.
What's the first thing you check? 👇
What's the first thing you check? 👇
X post 3: hot take (brand account)
DLP alerts don't stop data leaks.
They just tell you, very politely, that one already happened.
The only copy of customer data that's 100% safe is the one you never made.
They just tell you, very politely, that one already happened.
The only copy of customer data that's 100% safe is the one you never made.
LinkedIn post 1: founder story (Maya Chen)
A few years ago an auditor asked me a simple question: "Where is all of your customer PII?"
I was head of security. I had no idea.
I knew it was in the production database. It turned out it was also in two analytics warehouses, a staging environment someone refreshed from prod every Monday, 11 S3 buckets, and a Google Sheet a support lead made in 2019 to track refunds.
None of that was malicious. Every single copy had a perfectly good reason to exist when someone made it.
I spent that whole weekend in spreadsheets, and somewhere around Sunday night I realized the problem wasn't people being careless. Data just moves faster than any human can keep track of.
That weekend is a big part of why Ledgerline exists.
If you've ever had your own "where is all of it?" moment, I'd love to hear how it went.
I was head of security. I had no idea.
I knew it was in the production database. It turned out it was also in two analytics warehouses, a staging environment someone refreshed from prod every Monday, 11 S3 buckets, and a Google Sheet a support lead made in 2019 to track refunds.
None of that was malicious. Every single copy had a perfectly good reason to exist when someone made it.
I spent that whole weekend in spreadsheets, and somewhere around Sunday night I realized the problem wasn't people being careless. Data just moves faster than any human can keep track of.
That weekend is a big part of why Ledgerline exists.
If you've ever had your own "where is all of it?" moment, I'd love to hear how it went.
LinkedIn post 2: commentary (Maya Chen)
Everyone's rolling out AI copilots internally right now, and I keep hearing the same story.
Someone asks the assistant a harmless question. It answers with a slide from a board deck, or a salary spreadsheet, or a doc from an acquisition that never happened.
The AI didn't break any rules. That file was shared with "Anyone in the organization" back in 2021, and nobody noticed because nobody ever searched for it.
Copilots didn't create the permissions mess. They just made it searchable.
Before you switch one on, it's worth spending a week finding out what it'll be able to read. It will find everything you forgot about, and it won't be shy about sharing.
Someone asks the assistant a harmless question. It answers with a slide from a board deck, or a salary spreadsheet, or a doc from an acquisition that never happened.
The AI didn't break any rules. That file was shared with "Anyone in the organization" back in 2021, and nobody noticed because nobody ever searched for it.
Copilots didn't create the permissions mess. They just made it searchable.
Before you switch one on, it's worth spending a week finding out what it'll be able to read. It will find everything you forgot about, and it won't be shy about sharing.
Let’s talk about your cybersecurity product
/ /⠀GET IN TOUCH
Leave your details and we’ll follow up to discuss your priorities and how Security Flair can help.
We'll use your details to respond to your inquiry. See our Privacy Policy
Stay tuned!
Subscribe for our newsletters and get 20% off for our products.