Skip to main content

Security

14 results

Visibility at scale: How Figma detects sensitive data exposure
October 23, 2025
By Dave Martin
Solving security challenges at scale requires creativity as much as rigor. To reduce the risk of sensitive data exposure, we built Response Sampling: a lightweight, real-time control that watches outbound responses, validates access, and provides an early warning system across our products.
Inside Figma
Engineering
Security
Rolling out Santa without freezing productivity: Tips from securing Figma’s fleet
July 2, 2025
By Aaron Osborne
We scaled Santa, an open-source binary authorization tool, across all Figmates’ laptops to boost endpoint security while keeping workflows seamless. Here’s how we tackled the challenges and ensured a smooth rollout.
Inside Figma
Engineering
Security
Designing for security and usability: Figma's modern endpoint strategy
April 4, 2025
By Lamarr Henry
At Figma, security doesn’t have to slow you down. We’ve designed our corporate endpoint security with UX in mind, making it seamless and self-serve.
Inside Figma
Engineering
Security
Enforcing device trust on code changes
December 8, 2023
By Griffin Choe
Here's how the Figma security engineering team leveraged commit signatures and Okta Device Trust certificates to protect GitHub release branches.
Inside Figma
Engineering
Security
Behind the scenes
Server-side sandboxing: Containers and seccomp
October 24, 2023
By Hongyi Hu, Max Serrano
Containers and secure computing mode (seccomp) are sandboxing primitives that offer a lighter weight alternative to virtual machines (VMs). Here we cover the differences between them, and how we use both at Figma to achieve security isolation.
Inside Figma
Security
Engineering
Server-side sandboxing: An introduction
October 24, 2023
By Hongyi Hu, Max Serrano
In this three-part series, our security engineering team shares practical tips for deploying and operating application sandboxing techniques. First up: evaluating the many sandboxing options, and how to think about the trade-offs between them.
Inside Figma
Security
Engineering
Server-side sandboxing: Virtual machines
October 24, 2023
By Hongyi Hu, Max Serrano
With so many sandboxing options, it’s daunting to choose the right one. Here, we dive into the virtual machine (VM) security model for sandboxing, including the engineering trade-offs to consider and how we use them at Figma to achieve security isolation.
Inside Figma
Security
Engineering
EU hosting for Figma and FigJam files
September 25, 2023
By Figma
At Figma, we speak to customers around the world every day to discuss ways we can make their Figma and FigJam experience even more seamless. And opening new office locations over the past 18 months is just one step we’ve taken to add support and ensure we understand what matters most to people in their regions.
Inside Figma
Security
FigJam
How Linear made the most of a DDoS
December 15, 2022
By Carly Ayres
On a good day, the Linear team helps companies build better software by streamlining issue tracking and project management. When they’re not doing that, they’re trying to get back to doing that as quickly as possible.
Maker Stories
Profiles & interviews
Engineering
Case study
Security
Inside Figma: getting out of the (secure) shell
September 2, 2021
By Hongyi Hu
Security Engineer Hongyi Hu explains how the Figma security team built a simple solution for zero-trust shell access on AWS.
Inside Figma
Security
Engineering
News
Securing internal web apps
August 12, 2021
By Max Burkhardt
The Figma security team built out a system to securely provide access to internal applications. Security Engineer Max Burkhardt shares how we built the system, what we learned, and how this fits into our broader approach to security at Figma.
Inside Figma
Security
Engineering
An update on plugin security
October 2, 2019
By Evan Wallace
Learn about Figma's response to the security vulnerabilities that were reported in a 3rd-party library that we use for plugin security
Inside Figma
Product updates
Engineering
Security
Plugins & tooling