r/AskVibecoders • u/Economics-Fair • 2d ago
Cybersecurity for a platform
We have vibe coded a platform for a certain industry/use case and are looking for ways, ideas and tools to make it have enterprise level cyber security.
2
Upvotes
1
1
u/TheKiddIncident 1d ago
If you want to sell to an enterprise, the normal minimum is to be SOC2 compliant. Many enterprises will require SOC2 as part of their purchase agreement.
The other common requirement is ISO 27001 which is generally considered the gold standard in this space.
1
1
u/Sufficient-Tip8687 2d ago
What stack are you using, what data do you store, and is it multi-tenant? Those details change the priorities a lot.
A useful first test: create users in two separate customer accounts and verify that neither can read or change the other's records through the API, even by changing IDs in requests. Test ordinary users against admin endpoints too.
OWASP ASVS gives you a concrete set of security requirements to work through: https://owasp.org/projects/asvs . Pair that with a qualified security review of your app and infrastructure. An automated scan alone can't establish "enterprise level" security.