BYOK is getting more popular, but there's a confusion of approaches and some are better than others. And AI infra maturity is... lacking.
View in browser
AdobeStock_705190755-with-peg-newsletter-header

Greetings,

 

AI is taking the world by storm and bringing a whole new world of vulnerabilities, but the bulk of breaches are still around classic security problems and under-protected data. Our most recent work is around protecting AI data, but we also continue to improve and push forward on our broader platform to deliver on our vision of a more secure cloud.

 

This month we published two blogs, both linked below. The first talks about problems with BYOK and the common pitfalls that SaaS companies encounter.  The second is about how to evaluate end-to-end encryption security claims.

 

And on the topic of evaluating security, we've dusted off our own SaaS Security Maturity checklist and are using it to evaluate the security of vector databases. We've done two so far, Pinecone and Qdrant, and the scores and some of the misleading security claims were eye opening.

 

I'll be at RSA in May and speaking at RMISC in June. Let me know if you'll be at either of those and we can connect up.

Patrick Walsh CEO IronCore Labs

Patrick Walsh
CEO, IronCore 

AdobeStock_705190755-with-peg-newsletter-subhead

 

5 Things SaaS Companies Get Wrong with BYOK

 

BYOK or Bring Your Own Encryption gets interpreted in many different ways and delivered to customers many more ways yet. There are five ways that software providers often get it wrong when delivering BYOK to their customers.

 

> Read more about the common pitfalls with BYOK

ironhide-robot-eyes-newsletter-subheader

Testing End-to-End Encryption Claims

 

Claiming end-to-end encryption is becoming commonplace; fortunately testing claims can be easy. In this post, we show you how you can validate or disprove such claims and we use our own SaaS Shield as an example

 

> Read about testing E2EE claims

 

 

Recent version updates:

  • Cloaked Search is now version 2.8.0
    • Recent changes include better key rotation, prometheus metrics, performance enhancements, and bug fixes.
  • Tenant Security Proxy (part of SaaS Shield) is now version 4.12.2
    • Bug fixes and improved logging
  • Vendor API version 2.5.0
    • Improved API usability and tag filtering on more API endpoints
  • New Cloaked AI integration examples
    • We've added a number of integration examples showing how to use Cloaked AI with popular vector database options including in hybrid search scenarios. We now have examples for Pinecone, Elasticsearch, OpenSearch, Milvus, Marqo, pgvector, Qdrant, and Weaviate.
LinkedIn
X
github
mastadon
YouTube

IronCore Labs, 1750 30th Street #500, Boulder, CO 80301, United States, 3032615067

Unsubscribe Manage preferences