Authentic insights from the engineers building secure software every day.
AI agents can introduce significant security risks when they have uncontrolled access to sensitive data and unlimited permissions to act on their own. In this blog, we explain how to apply strict security controls to AI agents to reduce security risks.
The sheer volume of code being pushed out with AI has exploded. Still, someone needs to check what’s being pushed into production. So, project managers are becoming even more critical to keeping projects on track, managing client expectations, and ensuring AI-generated outputs are reliable. In this blog, we cover a few tips for managing AI-driven software development projects.
When evaluating nearshore software development vendors, organizations want to ensure their external development teams follow the same security and compliance standards as their internal teams. At Ewents, we've established a Trust and Compliance Program that formalizes how we vet engineers, protect client information, manage risk, and document the security controls behind our work.
Deploying AI agents on top of trashy data (like missing values or incorrect data) amplifies mistakes and produces wrong results. This blog goes over how Senior Data Engineers are still needed to clean and structure the data, and give AI agents the right business context to produce outputs you can trust.
Gone are the days of working with lawyers to implement risk and compliance policies, or delegating to technical teams the responsibility of complying with international regulations or standards. Now, companies can hire subject matter experts who understand how to translate legal requirements into steps (technical controls) that cybersecurity teams can implement at scale. This blog explores why every security team needs a Governance, Risk and Compliance (“GRC”) analyst and how the role can enable safe AI adoption across the organization.
FedRAMP 20X is a security certification for companies that provide cloud-based software or services to U.S. federal agencies. This blog covers how our team built a compliance automation platform that enables organizations to persistently meet security controls, collect evidence, and track outcomes to achieve FedRAMP 20X Class C (and other) certifications.
Companies are desperately competing for AI implementation engineers who can fix broken processes, translate business needs into technical solutions, and automate manual tasks. This blog explains the role of Forward Deployed Engineers (FDEs) and why they are a critical hire for organizations looking to implement AI at scale.
Commercial airlines often have thousands of vulnerabilities across their applications and cloud environments, making it impossible to fix everything at once. This blog takes a closer look at how one of our Cloud Security Engineers helps a Fortune 500 airline automate its vulnerability management process to reduce risk at scale.
Lowering the cost of running in the cloud usually comes from using the right cloud services, at the right time. In this blog, we cover how we reduced a client’s AWS bill by $10,000+/month.
Hiring a cybersecurity executive on a fractional basis is a practical first step for building a security department from scratch. A large financial services company engaged our fractional CISO in a nearshore model to build out a 3-person team and close critical security gaps.
What we learned interviewing engineers from Latin America who use AI daily and are already working for US-based clients in a nearshore staff augmentation services model.
WeRestore partnered with Ewents to launch Restore AI™, an AI-driven survivor recovery platform, in less than six months. With 3 senior engineers from Argentina, the team built a secure web and mobile product, reached paying customers, and proved the power of nearshore staff augmentation.