undefined | Better HN

0 points__s7mo ago0 comments

There are companies like Helix Guard scanning registries. They advertise static analysis / LLM analysis, but honeypot instances can also install packages & detect certain files like cloud configs being accessed

0 comments

3 comments · 1 top-level

Yokohiii7mo ago· 2 in thread

But relying on the goodwill of commercial sec vendors is it's own infrastructure risk.

limagnolia7mo ago

So don't rely on their goodwill? Instead, pay them, under a contract.. or do it yourself.

perlgeek7mo ago

You can also pay a commercial sec vendor if you don't want to rely on their goodwill.

j / k navigate · click thread line to collapse