How to secure your SaaS for launch day

Thanks for sharing about security! It is great to see security taken into consideration before launching a SaaS! Too many SaaS solutions are launched without taking into consideration the security aspect.

Cloudflare is a great solution in front of SaaS solution to have a first WAF layer. But you should not expect to have your SaaS fully secured. Some Owasp recommendations are not configured with the free version, and having a WAF solution does not secure a product against every threat. You should also take care of having your code (and dependencies) secure.

This article can be improved by adding more about some other OWASP recommendations, how to manage identities, permissions systems, maintaining code dependencies with known CVE, ... etc.

Say something nice to Adriannn…

2

Nice one Adrian. Thanks for sharing!

VicDevelopmently

·
4 years ago
·
1

Thanks for sharing about security! It is great to see security taken into consideration before launching a SaaS! Too many SaaS solutions are launched without taking into consideration the security aspect.

Cloudflare is a great solution in front of SaaS solution to have a first WAF layer. But you should not expect to have your SaaS fully secured. Some Owasp recommendations are not configured with the free version, and having a WAF solution does not secure a product against every threat. You should also take care of having your code (and dependencies) secure.

This article can be improved by adding more about some other OWASP recommendations, how to manage identities, permissions systems, maintaining code dependencies with known CVE, ... etc.

emmanuelgautier

·
4 years ago
·
1. 1
  
  Hi! Thank you for your comment, I agree that Cloudflare is not enough. I want to point out that my post was only intended to help out founders with the bare minimum and I believe that everyone should have a WAF. I am planning to post more awesome stuff and more interesting stuff in the near future.
  
  Adrian
  
  ·
  4 years ago
  ·