Menu
Sign In Search Podcasts Charts People & Topics Add Podcast API Pricing

Jayesh Ahire

👤 Person
201 total appearances

Appearances Over Time

Podcast Appearances

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

So when we deal with early stage organizations, the problem is everybody is an engineer. There's no security when we are dealing with early stage companies. Everybody just wants to get things done. That's where we make a lot of mistakes when it comes to security. We take a lot of things for granted.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

So when we deal with early stage organizations, the problem is everybody is an engineer. There's no security when we are dealing with early stage companies. Everybody just wants to get things done. That's where we make a lot of mistakes when it comes to security. We take a lot of things for granted.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

And I will say one of the things which we can do there is at least make sure the developers understand the security and making right choices.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

And I will say one of the things which we can do there is at least make sure the developers understand the security and making right choices.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

And I will say one of the things which we can do there is at least make sure the developers understand the security and making right choices.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

second thing to do that like to help them make the right choices just having any sass tool in place can be a good start it doesn't take much you can go with the open source sonar queue kind of a setup which will help you get started and that becomes the first entry point then second thing is having the right set of dash tool in place which

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

second thing to do that like to help them make the right choices just having any sass tool in place can be a good start it doesn't take much you can go with the open source sonar queue kind of a setup which will help you get started and that becomes the first entry point then second thing is having the right set of dash tool in place which

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

second thing to do that like to help them make the right choices just having any sass tool in place can be a good start it doesn't take much you can go with the open source sonar queue kind of a setup which will help you get started and that becomes the first entry point then second thing is having the right set of dash tool in place which

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

Again, as I stated earlier, these things can produce false positives, but they can at least help you get started on your journey towards the better security posture. And as you mature, things become more complicated.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

Again, as I stated earlier, these things can produce false positives, but they can at least help you get started on your journey towards the better security posture. And as you mature, things become more complicated.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

Again, as I stated earlier, these things can produce false positives, but they can at least help you get started on your journey towards the better security posture. And as you mature, things become more complicated.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

Now, instead of dealing with one API, which was running in your AWS account, like one EC2 instance, now we are dealing with thousands of APIs, a large Kubernetes cluster, maybe in multiple regions, and At a maturity stage, you want to get the inventory management in place where you know all of your APIs, what the problems are, how they are designed.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

Now, instead of dealing with one API, which was running in your AWS account, like one EC2 instance, now we are dealing with thousands of APIs, a large Kubernetes cluster, maybe in multiple regions, and At a maturity stage, you want to get the inventory management in place where you know all of your APIs, what the problems are, how they are designed.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

Now, instead of dealing with one API, which was running in your AWS account, like one EC2 instance, now we are dealing with thousands of APIs, a large Kubernetes cluster, maybe in multiple regions, and At a maturity stage, you want to get the inventory management in place where you know all of your APIs, what the problems are, how they are designed.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

You need controls on your design stage as well because you want to make sure that your API design adheres to some standard your organization has set. So that's different tools at different levels. But PI security testing plays a great role in the mature organizations for inventory management, for posture management, for security testing, for contextual security testing, for lack of better words.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

You need controls on your design stage as well because you want to make sure that your API design adheres to some standard your organization has set. So that's different tools at different levels. But PI security testing plays a great role in the mature organizations for inventory management, for posture management, for security testing, for contextual security testing, for lack of better words.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

You need controls on your design stage as well because you want to make sure that your API design adheres to some standard your organization has set. So that's different tools at different levels. But PI security testing plays a great role in the mature organizations for inventory management, for posture management, for security testing, for contextual security testing, for lack of better words.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

We are not just running things against the black box. But you're actually running the security testing with all the API context in place, all the understanding of an API in place. So that way you produce very pinpointed results, tell users what are the exact vulnerabilities, how to fix them, help them fix it.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

We are not just running things against the black box. But you're actually running the security testing with all the API context in place, all the understanding of an API in place. So that way you produce very pinpointed results, tell users what are the exact vulnerabilities, how to fix them, help them fix it.

Code Story: Insights from Startup Tech Leaders
The Haunted House of APIs - The Witch’s Brew with Jayesh Ahire

We are not just running things against the black box. But you're actually running the security testing with all the API context in place, all the understanding of an API in place. So that way you produce very pinpointed results, tell users what are the exact vulnerabilities, how to fix them, help them fix it.