Our Approach
For a lot of our products, there is only one chance to get it right and very few production opportunities to learn non-costly lessons. In this section we outline the basic requirements that all delivery of code – and therefore the code itself – should have.
Security should be at the heart of any approach that we take: the less we need to manage and the less attack surface we create, the better.
Sections
- Application & Cloud Security
- Authorization Policy
- Code Review
- Coding in the Open
- Coding Standards
- Gamedays
- Hosting
- Incidents
- Load Testing
- Monitoring & Error Reporting
- Pipelines
- Runbooks
- Production System Requirements
- Third Party Validation
- Tooling