Pre-launch security review turned into a rebuild of access, secrets and monitoring. Launched with an incident path already written.

Challenge

Production credentials were in the repository, every engineer had admin, and nothing alerted on anything.

Secrets rotated and moved out of source, roles scoped per function, monitoring and alerting live before the first external user.