San Francisco, CA, USA
Apr 18, 2019 | By Vladimir
Debugging memory leaks is rarely a piece of cake, especially when they only happen in production. The best way I’ve found to debug memory leaks in a Node.js application on Heroku is to analyze heap dumps. Obtaining such heap dumps in production can be challenging, as it might be hard to connect remotely to a production instance with the debugger.
Apr 11, 2019 | By Maurice
At Sqreen, our mission is to democratize security. To me, that means making security accessible to everyone. We’re often thinking about different ways to do that, so today I wanted to share a bit about a project I’ve been working on that can make application security available for more people. The project is a WordPress security plugin that leverages Sqreen security features to protect your favorite CMS.
Apr 2, 2019 | By Pierre
In 2006, I was brought into Apple to build their first offensive security team. We provided constant security feedback to hundreds of developers. Despite working with one of the finest engineering organizations in the world, my team and I discovered hundreds of attacks, from iPhone jailbreaks to attacks against Apple digital rights management (DRM) FairPlay to protocols & web services exploitations. With a team in the single digits, we were outnumbered 1000:1 by our developers.
Mar 20, 2019 | By Josh
SaaS has become the de facto standard for most B2B tools and B2C applications. As a result, more and more personal and business-critical data is entrusted to third parties who in turn use various third-party solutions themselves. We have a lot more SaaS in our lives, but what about SaaS security?
Mar 13, 2019 | By JB
As the technology decision makers for SaaS startups, we CTOs are a burdened lot. We need to constantly balance agility, security, and regulatory compliances. Figuring out the right balance of our time and attention can feel impossible to get right. So what are the security best practices and approaches given our constraints?
Jan 28, 2019 | By Sqreen
You use AWS. It’s secure out of the box, but introducing security issues through misconfiguration is easy. This checklist will help guide you to potential security issues exposed by your AWS configuration, and will help you to tighten up the security of your AWS infrastructure.
Jul 6, 2018 | By Sqreen
In this talk we will see how a malicious user can obtain a MongoDB injection and use it to prevent an application from responding.
Mar 19, 2018 | By Sqreen
We have interviewed Arnaud Breton, the organizer of this meetup group and Head of Product of Sqreen.
Jan 10, 2018 | By Sqreen
Formerly at Screenhero then Slack, Don was most recently Head of Developer Relations at Sqreen. Don was on the ground the day Slack’s security was breached, and shares some of the insights scaling startups need to handle the inevitable: getting hacked.