DevTools · Developer Tooling · 11–50 · Europe #b014_09

Context

We build open source feature management software and sell hosted and enterprise plans. Large customers will not buy without proof of security controls, yet we have no dedicated IT department.

Industry

DevTools & Software · Developer Tooling

Size

11–50 employees

Region

Europe

Tools budget

under $1K per month

Needs

Audit evidence collection. Enterprise prospects send long security questionnaires and we answer them by hand, slowing every larger deal.

Today: moved from hand-built spreadsheets to automated evidence pulled from code hosting and cloud accounts · Urgency: later

SOC 2 / ISO 27001 automation. We already automate monitoring for one attestation and want to add an international certification without doubling the workload.

Today: engineering head owns attestation without an IT department; weighing a second standard for new markets · Urgency: this year

Who decides

cto · founder led

Expects from suppliers

Questionnaire auto-answering from existing evidence; Integrates with our cloud account and code host; Pricing suited to a small team

Not a fit

Platforms that need a full-time administrator; Long onboarding projects with consultants

Stack

cloud: AWS-class hyperscaler, compliance tooling in place, CI/CD pipeline in place

Buying triggers

upcoming audit or certification, new market or product launch