Innovative cyber threats require CTO to adopt innovative approaches to response and counteraction. The development of the darknet as a marketplace for compromised credentials necessitates the implementation of new protection methods. We will discuss authorization security in SaaS services. I will talk about current threats, how 2FA can protect against the use of leaked data, what to do if cookies are compromised along with session tokens, and we will look at cases where darknet monitoring automation helps CTOs ensure the security of not only their own products, but also third-party supply chain services (Slack, GitLab, Jira, CRM), partners, C-level executives, and so on.

Vsevolod will share how he managed to build a profitable B2B SaaS without investments, which is used by top scientific publishers and grant agencies. What decisions were correct and helped to build everything in conditions of limited resources? What decisions were wrong? He will also talk about how to best organize teamwork in such conditions and what microservices have to do with it.

We wanted to make our service lightning-fast for users anywhere in the world. Edge computing looked like the perfect solution. In practice, we achieved lower latency — but also ran into a whole bunch of unexpected problems. In this talk, Igor will cover: - how they designed edge architecture for global users; - edge providers and infrastructure: what we chose and why; - which optimizations actually made a difference; - architectural trade-offs that shaped our system design; - when edge turned into an “edge-case” and forced us to find unconventional workarounds; - our failures — and the best practices we derived from them.

During the lecture, Mykyta will share the story of Solidgate's journey in building a high-performing and reliable fintech company, striving for 99.999% uptime on AWS’s SaaS platform. He'll uncover numerous caveats in doing things right without full system access, addressing product requirements, and staying up to date.