Getting security to scale: learnings from modern app sec teams
Jb
Why are we writing this? In April, I visited the Bay Area from Paris for a week with some members of my team. While we were there, we sat down…
Browsing Category
Dev
56 posts
How we built V8 natively on ARM
Émile-Hugo
When Amazon released their custom Graviton processor, we knew that ARM needed to be on our radar. Although clearly a first generation product, the investment required to build such a…
Building a dynamic instrumentation agent for PHP
TL;DR PHP instrumentation can be handled in many ways. When we built our PHP agent at Sqreen we made a series of architectural decisions that enabled us to maximize performance,…
Introducing a new plugin for making your WordPress more secure
Maurice
NOTE: This plugin is not currently being maintained At Sqreen, our mission is to democratize security. To me, that means making security accessible to everyone. We’re often thinking about different…
How I switched from Ruby to Python
Benoit
This article is a personal experience shared by Benoit, Sqreen’s first engineer who worked on the Ruby agent and on the Python backend. Ruby, a love story Back in 2008…
How Radix trees made blocking IPs 5000 times faster
To most people, what you learn during a CS degree doesn’t help much in your day to day job. That being said, you sometimes run in a problem which could…
Giving a voice to Jira
Oscar Baracos
The problem What if you could talk to Jira to create a ticket instead of having to interrupt what you’re doing to open a new tab, and painstakingly scroll through…
WebAssembly vs. the world. Should you use WebAssembly?
Vladimir
WebAssembly is known for its speed capabilities and this article will put it to the test to better understand what are the best applications to start using WebAssembly today. We…
Reflected XSS explained: how to prevent reflected XSS in your app
What is a reflected XSS? An XSS allows an attacker to inject a script into the content of a website or app. When a user visits the infected page, the…
Context information storage for asyncio
Vivien
At Sqreen, we are building an agent based on dynamic instrumentation. It detects security incidents from inside an application (injections, cross-site scripting etc.) and allows users to configure actions (blocking…