Building a Multi-Tenant SaaS: Key Lessons for Success
Lessons from building a multi-tenant SaaS: structural tenant isolation, Zero Trust networking, resilience, and continuous security, and why it is nothing like an internal enterprise app.
Insights
Blog
Practitioner notes on identity, Zero Trust, DevSecOps, and security automation.
Designing AWS Infrastructure to Support CJIS and FedRAMP Moderate Requirements with Amazon Q Developer
How Amazon Q Developer helped design a 266-resource Terraform infrastructure in AWS Commercial Cloud to support CJIS and FedRAMP Moderate requirements, including end-to-end FIPS 140-2 cryptography.
Virtue Is Its Own Reward — The Ethical Backbone of Cybersecurity
Most cybersecurity wins are invisible. Why integrity, diligence, honesty, and ownership, practiced when no one is watching, are the controls everything else depends on.
Reevaluating Our Dependence on Microsoft: Maybe It’s Time to Diversify
What the CSRB found about the 2023 Storm-0558 breach of Microsoft, how other cloud providers avoid the same failures, and why we decided to diversify away from a single-vendor stack.
The Impact of Simplification, Consolidation, and Automation in Cybersecurity: Implications and Benefits
More tools mean more complexity, more integrations, and more fires. Why simplifying, consolidating, and automating beats buying the next shiny product.
5 Strategies to Zero Trust Success Without Breaking The Bank
Five ways to cut the cost of a Zero Trust migration: prioritize, phase the work, reuse what you own, use open source, and automate, with example tools for each.
Zero Trust Security: Getting Identity Right
Why identity is the first pillar of Zero Trust, and the 13 steps Zephon recommended to a federal agency to mature identity security under EO 14028.
Custom QuickLinks in SailPoint IdentityIQ
How to add a custom QuickLink to SailPoint IdentityIQ that launches a workflow, with a worked example that moves accounts from one identity to another.
One Way to Overcome the Cybersecurity Labor Crunch
Point security products need ever more skilled people to run and integrate. How consolidating network and security functions, for example with SASE, eases the labor crunch.
Sending Password Reminder Emails with SailPoint IdentityIQ
How to email SailPoint IdentityIQ users before their passwords expire, using an email template, a rule, and a scheduled task.
Setting SailPoint IdentityIQ Password Expiration via REST API
Setting a password through the SailPoint IdentityIQ REST API doesn't set its expiration date. A workaround with a custom attribute, a lifecycle event, and a rule.
Why You Need to Externalize Your SailPoint Reporting
Five limits of SailPoint IdentityIQ's built-in reporting, and how a read-only replica plus a business intelligence tool improves performance, flexibility, and column-level security.
Transforming your DevOps Environment to DevSecOps using Open Source Tools
Where SAST, DAST, secret detection, dependency scanning, and RASP fit in the software lifecycle, with open-source and commercial tools for each.
Do Not Use an Administrator Account for Everyday Work
Why your everyday Windows account should be a Standard user, and step-by-step instructions to set up a separate Administrator account.
Who Added That User to the Group? Security Automation and Reverting Unauthorized Changes
A worked example: correlate Active Directory and SailPoint IdentityIQ audit data in Microsoft Sentinel with KQL, then automatically revert AD group changes made outside the approval workflow.
Azure Sentinel (Now Microsoft Sentinel): The Smart SIEM and SOAR Solution
What SOAR is, and how Microsoft Sentinel (formerly Azure Sentinel) combines SIEM analytics, Logic Apps playbooks, and Microsoft threat intelligence to automate security response.
How to Migrate to the Cloud: A Security Architect's Thoughts on Enterprise Digital Transformation
A security architect's dos and don'ts for moving to the cloud: ownership, identity governance, RACI, infrastructure as code, defense in depth, and user education.
Talk to a senior practitioner, not a sales team.
Book 30 minutes with Zephon. Tell us where the program is stuck and we will tell you plainly whether we can help.