Secureframe | Remote (Canada) | https://secureframe.com | 150-200k CAD Secureframe helps company get compliant and build trust with their customers. We do this by integrating in a companies core SaaS tools, ingesting data, and then displaying all misconfigurations that need to be remediated for a given security framework. Stack is Rails/React/Typescript/Postgres/Elasticsearch We've got three open engineering roles... - Source: Hacker News / over 1 year ago

My org is in a position where we'll need to get SOC II or ISO 27001 certified in the next year. I've been doing some research on the easiest way to go about this, and discovered secureframe (https://secureframe.com/). It looks like it is a platform that helps you automate/track some of the compliance tasks, but doesn't actually do the audit (they have partners that work through the platform). I'm wondering if... Source: over 3 years ago

Hi, founder of Secureframe (https://secureframe.com) here. Secureframe helps streamline compliance across SOC 2, ISO 27001, HIPAA, PCI DSS, and more. There are so many accurate responses in this thread. Like many have mentioned, SOC 2 is indeed not a prescriptive framework. Much of the confusion behind SOC 2 stems from that fact. It allows you to customize your InfoSec program to your company's needs. As we know,... - Source: Hacker News / over 4 years ago

I have a small "GitHub summarizer" agent: one system prompt, one job — answer questions about my GitHub account by calling the GitHub MCP server. I duplicated its configuration (MAVERIK supports this directly — same model, same prompt, same everything) and changed one field on the copy: the set of attached MCP servers, adding deepwiki, microsoft-learn, and context7. Neither agent needs any of those three for the... - Source: dev.to / 12 days ago

GitHub's official MCP server is excellent — and GitHub is narrowing its default toolset and consolidating PR tools into fewer, more capable ones, explicitly to cut tool bloat and improve agent reasoning. The implication is hard to miss: even one of the best API companies on the planet is learning that a 1:1 mapping from product API to agent tools isn't the right shape. - Source: dev.to / about 2 months ago

The official GitHub MCP server registers 83 tools. Most people set it up for reading code and managing issues. What they don't realise is they've also handed their agent the keys to:. - Source: dev.to / about 2 months ago

A lot of people use MCP servers to connect Claude to tools. I'm not generally a fan. MCP servers load a lot of information into context and often don't do everything that the API can. Last I looked, even the official Github MCP Server is guilty of this. I'd rather write tools directly, to my specifications. - Source: dev.to / 4 months ago

Rather than manually searching through repositories, I used Kiro with the GitHub MCP server to:. - Source: dev.to / 4 months ago