Security

Here's how the Figma security engineering team leveraged commit signatures and Okta Device Trust certificates to protect GitHub release branches.

Containers and secure computing mode (seccomp) are sandboxing primitives that offer a lighter weight alternative to virtual machines (VMs). Here we cover the differences between them, and how we use both at Figma to achieve security isolation.

In this three-part series, our security engineering team shares practical tips for deploying and operating application sandboxing techniques. First up: evaluating the many sandboxing options, and how to think about the trade-offs between them.

With so many sandboxing options, it’s daunting to choose the right one. Here, we dive into the virtual machine (VM) security model for sandboxing, including the engineering trade-offs to consider and how we use them at Figma to achieve security isolation.

On a good day, the Linear team helps companies build better software by streamlining issue tracking and project management. When they’re not doing that, they’re trying to get back to doing that as quickly as possible.

Security Engineer Hongyi Hu explains how the Figma security team built a simple solution for zero-trust shell access on AWS.

The Figma security team built out a system to securely provide access to internal applications. Security Engineer Max Burkhardt shares how we built the system, what we learned, and how this fits into our broader approach to security at Figma.

Learn about Figma's response to the security vulnerabilities that were reported in a 3rd-party library that we use for plugin security

At Figma, security is part of everything we do. Learn more about our recent security improvements.

With increasing intensity, design and product teams are mulling over the what’s and the how’s of design systems.