Featured Posts

  • Sales enablement
  • Risk & compliance

The SOC2 starting seven

  • icon Mar 12, 2020
  • icon 17 minutes read
  • icon 3603
So, you plan to sell your startup’s product to big companies one day. Congratu-dolences! Really, that’s probably the only reason you should care about this article. If …
Read more

All blog posts

  • Architecture
  • Detection & response

Slopportunity knocks: how AI impacts security practices for startups

  • icon Jul 21, 2026
  • by Ben "Fuzzy" Shonaldmann
  • icon 14 minutes read
  • icon 2880
Latacora has spent lots of time talking with startups about AI and how security practices need to evolve to keep up. It comes up in conversations with current and prospective clients, with people we meet at conferences, and occasionally, with random …
Read more
  • Architecture
  • Tooling
  • Detection & response

Stytch & Latacora: A Security Partnership Retrospective

  • icon May 22, 2026
  • icon 3 minutes read
  • icon 606
From growing startup to Twilio integration # Stytch and Latacora worked side by side to ensure that the developers and end users relying on Stytch’s platform benefited from a security program built for the sensitivity and criticality of the …
Read more
  • Infrastructure security

Latacora Achieves AWS Advanced Tier Services Partner Status

  • icon Jan 27, 2026
  • icon 2 minutes read
  • icon 356
We are thrilled to announce a major milestone for Latacora: we have achieved the Amazon Web Services (AWS) Advanced Tier Services Partner status within the AWS Partner Network (APN). This designation reflects Latacora’s technical expertise and …
Read more
  • Development

Writing MCP servers in Clojure with Ring and Malli

  • icon Nov 10, 2025
  • by Paul Rutledge
  • icon 11 minutes read
  • icon 2176
Introduction # Large language models, agents, and Model Context Protocol (MCP) are impossible to escape in today’s tech climate. At Latacora, we take a thoughtful and pragmatic approach towards new technologies like these. Are they going to …
Read more
  • Architecture
  • Cloud security

OIDC workload identity on AWS

  • icon Nov 04, 2025
  • icon 11 minutes read
  • icon 2335
Update: after years of being on the wish list of a ton of top AWS teams, AWS released a built-in version of this feature about two weeks after we published this. Never let it be said gentle ribbing doesn’t work. Also, thanks AWS! We meant it …
Read more
  • Infrastructure security

ECS on EC2: Covering Gaps in IMDS Hardening

  • icon Oct 02, 2025
  • icon 10 minutes read
  • icon 1945
Introduction # AWS ECS is a widely-adopted service across industries. To illustrate the scale and ubiquity of this service, over 2.4 billion Amazon Elastic Container Service tasks are launched every week (source) and over 65% of all new AWS …
Read more