TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Stop sending audit and access logs to a graveyard

3 pointsby ffo6 months ago
Hi HN, let me run a thought by you.<p>Have you ever thought that sending your users access and audit events to a data graveyard (aka log storage) is a bad idea? I certainly have! What if you could aggregate the audit and access events to your users data? This would make it far easier to understand and aggregate what your users are doing, leading to better insights and actions.<p>We at Zitadel recently raised $9M (1) to further this vision—an identity system that not only stores users and provides authentication but also helps you understand your users and their risk better. Imagine extending auth SDKs to not only check authentications&#x2F;sessions&#x2F;tokens but also to send events of what users do. With this well-structured data, it becomes easy to create forensic reports, usage reporting, and even threat intelligence.<p>While we&#x27;re just getting started on building the security analytics capabilities, Zitadel already solves a lot of the plumbing work around authentication, authorization, and single sign-on, even in multi-tenant scenarios with full support for self-hosting—all in a nice open source package (2).<p>How does that sound to you? Let me know your thoughts; happy to discuss here, Florian<p>1) https:&#x2F;&#x2F;zitadel.com&#x2F;blog&#x2F;zitadel-the-future-of-identity-infrastructure<p>2) https:&#x2F;&#x2F;github.com&#x2F;zitadel&#x2F;zitadel

no comments

no comments