Hi Tilderinos,

I head up a small startup and we're looking to get some support for our data security. Up until now we've worked with small mom and pops that didn't have any requirements, but a few of our new clients have full data security teams and our infrastructure and policies/protocols aren't up to snuff. We reached out to a few consulting firms and they quotes us between $80-100k to get things set up and run us through a full SOC2 review. As a small company we don't really have that type of budget, more like $40-50k. I stumbled upon Vanta and Drata as alternatives and had meetings with their sales folks last week. Both of their offerings from setting up our protocols to monitoring and getting us through a SOC2 were only $16k.

Are platform based companies like Vanta or Drata enough to get us off the ground while we're still getting set up? Has anyone worked with them before and have any feelings one way or the other? Should we be signing on with a security consulting company - be it at a lower rate if we can negotiate it?
This is all quite new to me and any insight folks here can provide would be incredible useful.

I found myself on the Archivebox website earlier today. After reading some of it, that's the kind of program I could use. The ephemerous nature of the web is bothersome, so much content is lost for one reason or another. Archivebox seems to be one of the most popular tools, and it can automatically mirror my locally downloaded website to archive.org, which is great. It seems complex though, maybe more complex than I usually tolerate these days. Which is why I am asking if anyone has personal experience with Archivebox or other similar programs. Do you find them useful and reliable? Have you ever found in your local storage a webpage that you really liked, which was gone from the web? How's your setup?

Thank ;)

A year or two ago when the decay of social media became a popular topic of discussion, there was a lot of talk about a resurgence in the use of RSS readers. My impression recently was that the RSS renaissance hadn't really materialised in the end, but I realised that if it had it would be pretty hard to tell.

So, Tildes users: do you use an RSS reader currently? If so, is that a recent decision? Tell me about your experience.

Edit: Apache OR Nginx? Could someone fix my title - I posted without proofing.

My wife is having half decent success with ecommerce. She's doing great on Etsy and eBay, and now her website is starting to pick up.

It's currently hosted on 20i who pride themselves on being an excellent WordPress and Woocommerce provider, with a half decent CDN. In reality, I think it's pretty shit for what you pay for.

I'm tempted to either grab a VPS or even go as far as a bare metal at a CoLo with public IP and run the full stack myself. If I do, shall I go Apache or Nginx? I've done both and I'm pretty agnostic. OS would be Debian.

Before I go to this length though, does anyone know of a fair priced but good performing Woocommerce platform? She's got hundreds of hours already, the plugins and over 300 products listed, so I'm loathe to move to a different solution, however, I'm not ruling it out.

The reason to not all in on Etsy or eBay is the 25% cut they take of everything. Using a personal site and Stripe payment platform means it's more 1% + 20p for processing.

Ideas, thoughts and suggestions please?