Startup left production AWS keys public for 5 months; their VDP was silent (benzimmermann.dev)

[dead]

They're prolly vibe coders.

> The company displays SOC 2 and ISO 27001:2022 certifications on its website, claims least-privilege IAM practices, conducts regular third-party penetration testing, and offers its own AWS misconfiguration scanner called Pump Secure.

Delve customers?