Recife

The best thing you can do is to contract a good company or a good security analyst to verify your server, source code and everything involved in your product. The cheapest way to do that is execute a white hat security assessment. If you have some security consultants working with you, ask to them review your source code and verify the patterns that your programmers are doing wrong.
 
Once the security consultants find wrong stuff in the source code, they could teach the programmers do the right way. Security must be frequently studied by your team. Of course you need some specialist, but if the company has a small team, everyone can grow together.

Depends, man. There are a lot of stuff that a cyber security company can do. You can offer SOC, vulnerability assessment, secure code review, consulting and so on. If you never work with some of these things before, please, don't start a cyber security company. You need to know a lot to gain contracts, because you will work with a lot of sensitive information, takes time to a company trust in your company to contract this kind of services.

In terms of cybersecurity, what do companies like us typically do?
A lot of assessments, code reviews, has their own SOC team or contract some.
 
But how do we know if we've been breached?
You need to implement some measures and then you need logs, logs everywhere. You need that your system/application warn you when some strange thing happens.
 
How often do we need to consult vulnerability assessments and code scans?
If you are a small company, try to implement a SDLC in your team that will be some thing huge for your security.
 
Do we need to hire a 3rd party internet security company to monitor our environment?
If you don't have some specialist then you need.
 
How much should we expect to pay per month and what should we expect in terms of services?
 
What country are your company from?

I am talking about make a code review about security issues. It is a different product, I don't think every programmer knows all vulnerabilities. So, it is important a security guy review his code to find those vulnerabilities.

Someone could share your own experience? I want to understand the mindset, the necessity of "Oh, I need some security guy to help me now". This moment happens only if your company was hacked? Happens when you customer ask for that? Is the fear? Please share your own experiences.

Which moment your company started to worry about security?

I was thinking about offer Code Review as a service, but I think the companies are not comfortable to share their source code. Someone knows a way to offer this kind of service?

Learning center

Playbook To Launch Your Startup

Profile

Profile Overview

Quick links

Learning center

Playbook To Launch Your Startup