Compliance software like Vanta, Drata and similar only read 3rd party APIs (AWS, Github, Okta etc. ) but cannot automatically audit your app that actually uses them, e. g.

Source: [Hacker News](https://news.ycombinator.com/item?id=49085002)

Sponsored