Every major software outage shipped a post-mortem.
The same handful of practices failed every time.
A public, CC BY 4.0 licensed index of major publicly-documented software incidents. Each one mapped to the Concordance engineering protocols that the company's own published root-cause analysis cites as having failed.
Pattern across 2 incidents
Filtered viewThe same 5 engineering practices failed in the majority of these incidents. Click any to see every incident where it failed.
A threat actor used a service-account credential stored in a personal Google account to access Okta's customer-support case-management system and download HAR files containing session tokens for 134 customer organisations.
A threat actor exploited an error in Codecov's Docker image creation process to obtain credentials, then modified the Bash Uploader script to exfiltrate environment variables (including secrets) from customer CI environments.
Errata: hello@concordancelabs.com