December 2009 posts

Rails, authlogic and password history

vendorrisk.com client sites use the excellent Authlogic gem to handle user sessions. As we mentioned in the previous blog article, we recently added the ability for site admins to declare that users cannot use a password they’ve used in the past.

After a bit of Googling, I didn’t see any solutions out there for dealing with this issue, so we rolled our own. Here’s how we went about it…

Comments: 1

New password enhancements

In his article entitled “How to use Software as a Service securely”, author Phil Cox describes how SaaS providers need to better enforce password restrictions to aid in preventing unauthorized access to the application.

When we first launched VendorRisk.com, we had the following criteria in place…

Comments: 0

Mobile version now available

Over the weekend (blizzard = productivity), we pushed the first iteration of a mobile version of the VendorRisk application.  If you access your site from a mobile device, you’ll be given a very low-bandwidth version (no JavaScript, no images, little CSS, no color scheme) of your site.  Once you login, you have access to your …

Comments: 0

New module: Hardware

When we first developed VendorRisk.com, we had modules for Services and Software, as that’s what the original client required.  When we showed it to several other people, their reaction was “That’s great, but where’s Hardware?”
Touche.  Over the weekend we added it to the site.  There is now a tab up top for Hardware, which has …

Comments: 0

Fun with Rails A/B testing

When we launched VendorRisk.com a few weeks back, we added a very simple A/B experiment to test which sign up call to action worked better.  The first two options we chose were “View plans and pricing” and “Try free for 30 days!”.  We assumed that the latter would perform better because it sounded more enticing …

Comments: 0

Integrated OFAC search

We just pushed a new feature live — the ability to search the official OFAC list without leaving the Vendors section of your VendorRisk site. You can see the screenshots at http://vendorrisk.com/features/ofac-search.

Comments: 0

Featured on KillerStartups.com

VendorRisk.com was highlighted on www.killerstartups.com today (12/9).  Check it out and vote for us!

Comments: 0

Introducing VendorRisk

VendorRisk.com – a web-based approach to tracking your organization’s vendors and contracts – was launched last week.  For background purposes, we developed a similar Intranet tool a few years ago for a Boston-based bank.  The feedback had been positive, and after mulling it over for far too long, decided to use that application as the …

Comments: 0