# Bit by bit: how Latacora helped Notion build security that scales

DevFeed: [Bit by bit: how Latacora helped Notion build security that scales](<https://devfeed.tech/articles/bit-by-bit-how-latacora-helped-notion-build-security-that-scales-29185.md>)

Original publisher: [Read original article](<https://www.latacora.com/blog/2025/08/29/bit-by-bit-latacora-notion/>)

Published: 2025-08-29T16:55:00Z

Content type: opinion

Language: en

Sources: [Latacora](<https://devfeed.tech/sources/latacora.md>)

Topics: [Notion](<https://devfeed.tech/topics/notion.md>), [Security](<https://devfeed.tech/topics/security.md>), [Application Security](<https://devfeed.tech/topics/application-security.md>), [cloud-infrastructure](<https://devfeed.tech/topics/cloud-infrastructure.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [Google Cloud Platform (GCP)](<https://devfeed.tech/topics/google-cloud.md>), [SIEM, Security](<https://devfeed.tech/topics/siem-security.md>)

Tags: [application-security](<https://devfeed.tech/tags/application-security.md>), [aws](<https://devfeed.tech/tags/aws.md>), [azure](<https://devfeed.tech/tags/azure.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [cloud-infrastructure](<https://devfeed.tech/tags/cloud-infrastructure.md>), [github](<https://devfeed.tech/tags/github.md>), [google-cloud](<https://devfeed.tech/tags/google-cloud.md>), [security](<https://devfeed.tech/tags/security.md>), [siem](<https://devfeed.tech/tags/siem.md>)

## AI overview

A case study of how Notion partnered with Latacora from 2019 to build a security program while the company was growing, designing an API, and responding to customer security questions. The engagement covered foundational security work, hiring decisions, cloud and developer platforms, and SIEM tooling.

## Source excerpt

Security rarely tops the priority list for startups - but that doesn't make it optional. Running a startup is no small feat. Facing enormous pressure to address a never-ending list of priorities (finding market fit, fundraising, launching new features, scaling infrastructure, etc.) security often becomes a "later" issue......until it can't be. Even when companies know they need help, the breadth of the problem can be intimidating. Application security, cloud infrastructure, third-party vendors, compliance, cryptography: any resource-constrained startup will be hard-pressed to find a unicorn hire who can own all these responsibilities equally well.