Api Gateway and application security Archives

In API Security

Wallarm launches Cloud WAF with the best-in-class API protection

October 7, 2020 3 Mins Read

An easy to use Cloud WAF and API protection package We are thrilled to announce the launch of the new Wallarm Cloud WAF deployment for Wallarm Cloud-Native Security Platform. Get your application protection up and running in 15 minutes, without any installation at all. You can now gain protection across a full portfolio of your applications, APIs, and serverless workloads without any agent installation at all. Typically Wallarm customers install Wallarm nodes as Kubernetes Ingress…

In API Security

340 weak JWT secrets you should check in your code

September 2, 2020 3 Mins Read

JSON Web Token (JWT) is the data format with bill-in signature and encryption mechanisms that are often used by modern web applications to store user sessions and application context, including authentication by SSO and meta-data. Usually, you can find JWT tokens in an Authentication Bearer HTTP headers for authenticated API calls. As Wikipedia says: “The tokens are signed either using a private secret or a public/private key. For example, a server could generate a token…

In Cloud Security

How To Protect Your Kubernetes Cluster with Wallarm – Configuration and Finetuning – part 2 of 3

July 6, 2020 7 Mins Read

Wallarm’s Kubernetes Ingress controller is designed to help protect your Kubernetes cluster against cyberattacks. Its built-in web application firewall (WAF) is capable of detecting and blocking a wide range of common attacks against Kubernetes deployments. The previous article in this series discussed how to set up Wallarm’s Ingress controller to protect your Kubernetes cluster. However, there are a few configuration settings that you may need to modify in order to ensure optimal protection and performance…

In DevOps

Cybersecurity: What to Expect in the Year Ahead

December 30, 2019 7 Mins Read

So, what lies ahead? Let’s turn over our virtual coffee cups and read the coffee grounds. …. report also shows that as many as 60% of all hacker attacks are using a compromised web application to gain unauthorized access or steal data.

In API Security

Is Service Mesh right for your infrastructure?

November 7, 2019 8 Mins Read

Andrew Jenkins of Aspen Mesh identifies three deployment options with regards to how a Service Mesh delivers its services:

As a sidecar that runs alongside your microservice container
As a library that can be built into each of the microservices
As an agent that sit in the container infrastructure and provide the service to all the containers on that node

In Cloud Security

Security 101 for eCommerce Businesses

October 24, 2019 21 Mins Read

Understand the risks to ecommerce businesses and how to secure your online business. Know the fact from compliance to dealing with hackers, at any level of business maturity.