Cloud Database Security Engineering and SDLC | SingleStore

This post elaborates on the engineering practices and SDLC that contribute to SingleStore's PCI DSS compliance. It details the six core practices: security training, threat modeling, security requirements definition, architecture vetting, secure code review, and automated CI/CD testing. It also outlines the specific automated security tests performed on every build (SAST, SCA, DAST, container image scanning, secrets scanning, IaC scanning, CNAPP). Furthermore, it describes external validation methods like annual penetration testing and a responsible disclosure program, and details incident management aligned with NIST SP 800-61.