Showing 1–8 of 8 articles
Check the SaaS settings you assumed were safe
A business subscription does not automatically select the right sharing and access controls. Define the intended configuration, review administrators and integrations, and test the user experience.
Read the visual guide
What a container does not isolate
A container’s boundary depends on its configuration and the host it shares. Review privilege, mounted resources, credentials, network access, and runtime controls as a complete deployment.
Read the visual guide
Where SAML and OpenID Connect sign-in usually fail
A signed identity message still needs the correct issuer, audience, destination, and request context. Review the integration as a complete sign-in and account lifecycle.
Read the visual guide
Change the default passwords on network appliances
A device may have separate credentials for administration, monitoring, support, and cloud services. Review all of them before deciding that the factory access has been removed.
Read the visual guide
Staging sites that are still open on the internet
A staging site can contain production data and powerful integration credentials. Keep its access and outbound behavior deliberately separate from the live service.
Read the visual guide
Who should be allowed to change your DNS records
Control of DNS can affect email, websites, and other essential services. Identify the registrar, DNS host, privileged users, and applications that can change records.
Read the visual guide
Printers and cameras that still have an open admin page
An office appliance can hold credentials, send documents, and expose management features. Treat it as a managed system with an owner, support status, and limited access.
Read the visual guide
What you still have to secure when you use the cloud
A managed cloud service does not remove every security responsibility from your team. Map the provider’s role and your own configuration, identities, data, and recovery duties.
Read the visual guide