Blog

Pranav Shikarpur

In recent years, large language models (LLMs) like GPT-3 and GPT-4 have revolutionized how enterprises, especially in healthcare and finance, process and interact with data. These models enhance customer support, automate decision-making, and generat...

Oct 3, 2024

Bruce McCorkendale

If you need to know when a token stored in Vault is expiring or rotating, you can now set a watch to get notification emails in advance of the change, and when it occurs. You can add project members to a watch so that they will receive notification ...

Oct 1, 2024

Bruce McCorkendale

We are happy to announce that today, Pangea is launching the Sanitize API to ensure that PDF documents are cleansed of dangerous and sensitive content such as: Malware, including file format irregularities that could be exploitable Links to dangero...

Sep 30, 2024

John Gamble

Do you remember when and where you first used an AI-powered product that caused you to question reality? I do. In the spring of 2022, I tested a synthetic text-to-voice app that was so uncannily realistic that I briefly questioned if it was truly AI ...

Sep 19, 2024

Vanessa Villa

What is ABAC? Attribute-based Access Control is an authorization schema that allows for fine-grained access policies to be created based on attributes like location, time of day, and a user’s department. For a more detailed look as to the benefits of...

Sep 10, 2024

Keith Casey

All of access control comes down to one fundamental question: How do we grant the right access to the right things to the right people and systems for the right amount of time? Every other question addresses an aspect or nuance within that question. ...

Sep 10, 2024

Romana Vasyleha

Composable Security APIs highlighted in new Gartner Hype Cycle report. As cloud applications grow and AI-powered software becomes more prevalent, a Composable Security API approach to security is essential for building and scaling your apps efficient...

Sep 10, 2024

Pranav Shikarpur

Your data has been exposed—and not because of a classic bug, but because your LLM accidentally leaked it. Sensitive information disclosure is a growing concern, especially with the rise of Large Language Models (LLMs) in our apps. This vulnerability ...

Sep 5, 2024

Michael Weinberger

In the ever-evolving landscape of AI code generation and developer assistance tools, providing users with accurate and relevant information quickly is crucial. To help ensure that developers can swiftly and easily add security features to their produ...

Sep 5, 2024

Vanessa Villa

What is authorization (AuthZ)? Authorization is a cornerstone of enterprise security. It dictates who can access specific resources, what actions they can perform, when, and the authorization logic can be as rigorous as to include attributes such as ...

Sep 4, 2024

Baruch Mettler

Account takeover (often abbreviated as ATO) is a compromise where a user has lost control of their authentication credentials resulting in them being exposed to malicious actors. These credentials are then used to commit data theft, fraud, and other ...

Sep 3, 2024

Vanessa Villa

"Your data may have been exposed". The reason you hear this statement is to meet compliance with the Health Insurance Portability and Accountability Act (HIPAA). This law is a critical aspect of protecting sensitive patient information and identifia...

Aug 22, 2024

Pranav Shikarpur

Audit logs are a critical component of enterprise systems, providing a detailed record of activities within an information system. They serve as the backbone for security monitoring, compliance, and operational analysis, making them indispensable for...

Aug 21, 2024

Romana Vasyleha

Extend Auth0 log retention to 10 years in under 2 mins! While Auth0 by Okta offers up to 30 days of log retention, your app likely needs more - often to become compliant with SOC2, HIPAA, and others. Extend Auth0 log retention to up to 10 years with ...

Jul 24, 2024

Keith Casey

“We had 100 signups today!” is one of the most beautiful things you can hear as a young startup. It’s a sign that you’re doing something right. Your product solves a real problem. Your marketing is getting in front of the right people. Your signup fl...

Jul 18, 2024

Baruch Mettler

Businesses face a growing number of security threats, however, despite wide rollout of multi-factor authentication (MFA) and a wide compliance level focus on password policies, credential compromise remains a significant threat. Monitoring for creden...

Jun 17, 2024

Pranav Shikarpur

In a world where hackers are trying to brute force user accounts (23andMe breach 2023), it is vital for developers to maintain a long-lasting and tamper-proof audit log of all authentication events to keep their apps secure. While many companies use ...

Jun 7, 2024

Romana Vasyleha

Pangea joins GitHub Copilot Extensions Partner Program We are thrilled to join the GitHub Copilot Partner Program and launch the Pangea extension for Github Copilot, which Microsoft CEO Satya Nadella announced at the Microsoft Build 2024 Keynote. Mil...

Jun 1, 2024