12 posts tagged with "security"

As the world becomes increasingly digital and technology advances, so too do the threats. As a result, we must adapt and learn how to protect and safeguard our online presence, making robust cybersecurity measures more vital than ever before. This is especially important for companies, which generally have more at stake than individuals, necessitating a shift from outdated methods to new strategies to effectively combat cyber attacks.

The rapid pace of software development and the need to continuously deliver new features to stay competitive in today's market has introduced a unique set of challenges, one of which is security. With more and more software applications coming to play a pivotal role in user's daily lives, ensuring the security of these applications is paramount.

Security has become increasingly important for businesses and organizations of all sizes, especially in today's ever-evolving landscape, where cyber threats constantly loom around the corners like shadowy specters. As software systems become increasingly complex and cyberattacks become more prevalent, organizations need effective strategies and tools to bolster their security posture.

The question arising then is: How can they strike a harmonious balance between ensuring the security of their applications and meeting the relentless demand for innovation? One such tool that has gained prominence is feature flagging, and in this blog post, we'll examine how we can utilize it to enhance security while following best practices.

Government agencies, with their strict security requirements, often face difficulties in fully embracing DevSecOps practices. Balancing the need for rapid feature releases with robust security measures poses a challenge. Feature flags offer a promising solution in this context. By seamlessly integrating into DevOps and DevSecOps pipelines, they can empower government agencies to effectively manage feature releases while maintaining high levels of security.

Adding new features to existing applications used to mean that code pushed into production automatically updated the entire app. This raises security risks to the existing application, because a single bug could have catastrophic consequences. This risk can be reduced by implementing a secure feature management architecture that allows code updates with increased flexibility and the power to easily switch between versions.

Choosing the right SaaS (Software as a Service) provider is a crucial decision for any organization. When evaluating potential vendors, it's essential to have a clear understanding of their security measures, service level agreements, and other factors that may impact your business.

Here are some key questions to help guide your evaluation process.

By now, you’re probably well-acquainted with the suite of useful feature flag tools offered by ConfigCat. In case you aren't, ConfigCat is a developer-centric feature flag service with unlimited team size, awesome support, and a reasonable price tag. Let's play it safe and discuss 3 cool things that ConfigCat allows you to do – which we bet you didn’t know about! I’ll cover:

• Purchasing a ConfigCat subscription for someone else
• Enabling Two-Factor Authentication (2FA) in ConfigCat
• Getting a free feature flag pack for students

Let’s get started!

There's nothing more frustrating than writing up a thoughtful, intentional feature request to your favorite service provider and then not getting a response or subsequent feedback.

At ConfigCat, we understand the importance of feature requests because we know that our service becomes more successful when our customers are happy and their needs are met.

As a result, we keep track of each of our customers' feature requests to help us make informed product decisions and implement the features that matter most.

ConfigCat is NOT affected​

A remote code execution flaw was recently discovered in log4j. The vulnerability is fixed in log4j 2.15.0.

Between 28th and 30th September, our customers experienced long response times, timeouts, and failing responses from the ConfigCat CDN. Since this was a significant disruption in the ConfigCat service, we want to be upfront about it and share all the information about what happened, what we've done, and what changes we will implement.

Nowadays, almost each and every business uses some sort of web application, so cyberattacks are becoming a daily struggle for huge enterprises as well as for small businesses. It’s not enough for programmers to build an application that looks great and works smoothly. Many consumers are getting aware of the need for security in the applications they are using.

As ConfigCat is a Software as a Service business with applications running in the cloud, we take security as seriously as reliability. Here are the security measures we take to ensure that we deliver a secure application.