This is the 2nd launch from Very Good Security. View more
Control
Accelerate and automate security & SOC2 compliance for free
Control solves compliance with one integration. SOC2, ISO 27001, PCI & more. No more complex legalese, writing policies or manually running endless checks across your systems. Accelerate & automate your security program and SOC2 compliance for FREE today.
We’re honored to be hunted by @hnshah. Thank you for the support!
Hey Product Hunt! I’m excited to share Control with you.
Over the years, as both a founder and product leader, security and compliance always seemed to delay and derail execution.
I’ve seen multi-million dollar deals fall through because of non-compliance, or basic security missteps lead to major incidents, (like employees getting scammed for gift cards). And don’t even get me started on consultants and spreadsheets. I have so many stories to share...
That is why we built Control - to solve compliance with one integration.
Controls accelerates and automates SOC2, ISO 27001, PCI and more - so that you can build your company, not work on compliance. No more complex legalese, writing policies or manually running endless checks across your systems.
At VGS, we’re on a much bigger mission though - to protect the world’s information. This means that we are relentlessly committed to delivering solutions for the ever changing complexities of security and compliance.
That’s why as a part of this launch, we’re offering guaranteed SOC2 compliance on Control for FREE. Just create an account, commit to real security, and we’ll take care of the rest.
We’d love to hear your feedback, and if you have questions about Security/Compliance, let us know. My team and I will be around all day to help.
Good question @datarade. Security can't be an afterthought. Getting a compliance certification (like SOC2 or PCI) is usually a goal that aligns with a forcing function like customer demand or a partnership/regulatory requirement. However, implementing a baseline security posture as early as possible not only puts important protections in place, but sets a company up for the compliance work that’s likely coming down the pipeline (i.e. reduce technical debt).
Our goal is to meet companies where they are, and empower them to improve their security posture over time. Companies should be thinking about how to embed the right level of security into their workflows as early as possible. This is why we offer Security Foundations (https://bit.ly/2MWexPm) for free. So that any company, no matter the stage, can implement a baseline security posture. Then, when a company needs to obtain a compliance certification, most of the work is already done.
You're building tons of awesome stuff @datarade. Have you ever been blocked by security/compliance?
3 years ago I was an IT director and got handed a 500 row spreadsheet with our VP of engineering and was told we had to get compliant ASAP to close a huge deal. We said that would take a year and a million 💸 worth of new employees, infrastructure, contractors, etc. So they hired an expensive consultant and we got another 500 row spreadsheet, but this time with comments on it 🙄
We made Control to make that never happen again. For compliance people, there are all the policies, risk assessment tools, and visibility tools you need. For engineering folks there are high value security monitors and automated evidence collection to keep compliance off of your back.
What's crazy is that 3 years ago we spent hundreds of thousands of dollars to barely scrape by an audit, when today with Control we could've done all of it faster for free. Hope you all enjoy it!
Very Solid product for tokenisation and invocation.
We evaluated VGS, PCI Proxy & Hashi corp.
Pros:
-> Their Dev Eco system was good.
-> Had Libraries/SDKs for almost all languages (we had on our codebases)
-> Implementation is straightforward
-> No discrenable latency due to this.
Cons:
-> 1 Minor let down was support for legacy partners with SOAP interface.
Cost Observation:
-> WHile there is no question of value, I had to convince the Board / CFO for 2 quarters to get budget (It is a costly product - esp if you plan to get PCI-DSS through them)
-> Per tokenisation and ionvocation price will start to eat into your margins if your transactions are greater than say 50K a month
But it is a solid, secure and overall good product.
Very Good Security
DocAcquire
Very Good Security
The Twenty Minute VC
Link Texting
Very Good Security
Link Texting
Very Good Security
Very Good Security