{"id":49675477,"user":"bix6","time":1789237569,"time_ago":"8 days ago","type":"comment","content":"

Did you build what you want or what your customers need?","comments":[{"id":49675657,"user":"nandakishor_ml","time":1789238372,"time_ago":"8 days ago","type":"comment","content":"

its a need of the hour","comments":[{"id":49676051,"user":"bix6","time":1789240377,"time_ago":"8 days ago","type":"comment","content":"

And none of the LLM providers can do this themselves? I can’t just point Claude at a GitHub repo and ask it to check it for me?","comments":[{"id":49676146,"user":"nandakishor_ml","time":1789240840,"time_ago":"8 days ago","type":"comment","content":"

not without sending your code to them, if you have .env file with variables exposed, you will need to rotate again.","comments":[{"id":49677421,"user":"bix6","time":1789248680,"time_ago":"8 days ago","type":"comment","content":"

Ok and? Nobody actually cares to pay for security unless it’s mandated. Why would someone spend money on your unknown code review tool when the LLM provider the company has already approved can do it?","comments":[{"id":49679815,"user":"nandakishor_ml","time":1789271217,"time_ago":"7 days ago","type":"comment","content":"

Healthcare btw and also the llm that done the code is bad at review and if you do write code people who don't want to send credentials to cloud","comments":[{"id":49684062,"user":"alchemism","time":1789307810,"time_ago":"7 days ago","type":"comment","content":"

That’s not how enterprise data controls operate in e.g. AWS Bedrock or Databricks - where they use models - sorry to inform you.","comments":[{"id":49709307,"user":"nandakishor_ml","time":1789459884,"time_ago":"5 days ago","type":"comment","content":"

You do need to sign DPA with them","comments":[{"id":49724968,"user":"alchemism","time":1789557740,"time_ago":"4 days ago","type":"comment","content":"

Yes, it would typically be done under contract and then implemented as compliance policy across the enterprise cloud - it would not be up to a tenant to arrange a ZDR policy.

Also, the models are shipped to big platforms to run as an executable on their hardware. Except in certain cases like Anthropic Fable.

In true enterprise you’d want a compliance office product before an engineering office product…","comments":[],"comments_count":0,"level":7,"url":"item?id=49724968"}],"comments_count":1,"level":6,"url":"item?id=49709307"}],"comments_count":2,"level":5,"url":"item?id=49684062"},{"id":49683573,"user":"bix6","time":1789304853,"time_ago":"7 days ago","type":"comment","content":"

Right well good luck.","comments":[],"comments_count":0,"level":5,"url":"item?id=49683573"}],"comments_count":4,"level":4,"url":"item?id=49679815"}],"comments_count":5,"level":3,"url":"item?id=49677421"}],"comments_count":6,"level":2,"url":"item?id=49676146"}],"comments_count":7,"level":1,"url":"item?id=49676051"}],"comments_count":8,"level":0,"url":"item?id=49675657"}],"comments_count":9,"url":"item?id=49675477"}

Comment by bix6