GlassTrace

The cloud is someone else’s computer. The company you buy from — the one whose logo is on your invoice — doesn’t have your data anymore. Fifty other companies do. And those fifty hand it off to another hundred.

And everyone just trusts that it’s fine.

I run a cybersecurity consulting practice. Here’s what I see, over and over: a vendor gets breached. Twelve hours later the security team is trying to figure out if logs even exist, the legal team is digging through Google Drive looking for the signed contract, and nobody can say which clients are exposed — because the person who knew left the company two years ago.

Collecting a SOC 2 report and filing it in a folder isn’t vendor management. It’s paperwork.

So I built the tool I kept wishing existed. GlassTrace tracks the stuff that matters about your vendors — posture, controls, contracts, where your data actually lives. And it maps the blast radius: which services depend on that vendor, which customers are downstream, and who you need to notify.

When something goes wrong, you know what’s exposed, who to call, and what to do — before the panic sets in.