Security blog

In this new report, we surveyed 235 IT and cybersecurity professionals across Europe to shed light on the state of API security.

This post details the journey of improving the security of TLS private keys and improving the performance and efficiency of TLS handshakes along the way.

The PCI Security Standards Council announced Version 4.0, the latest iteration forces nearly every organization to update policies, procedures, and more.

The White House and Office of the National Cyber Director called for the adoption of memory safe languages, and we see a way for existing code be more memory safe as well.

In this post, we will discuss a low latency approach to detect these attacks by co-locating the password hashes in a KV Store, along with Compute on Fastly’s edge.

Learn threshold blocking best practices and how it increases your WAF confidence so you can get into blocking mode faster.

Replacing OpenSSL with BoringSSL was to reduce the frequency of CVE response and improve the security of our TLS termination system for our customers.

Flexibility is required for confident blocking decisions that impact as little legitimate traffic as possible. Learn more about the evolution of blocking.

To gain a broader understanding of the threat landscape during "Cyber 5" weekend, we analyzed attack activities with a particular focus on commerce sites.

We're excited to announce Fastly's new WAF Simulator, which simplifies the testing process and provides the following key benefits.

Legacy WAFS can come with a lot of shortcomings, that's why when designing the Fastly Next-Gen WAF, we set out to enable users with these four key benefits.

Vulnerabilities are an unfortunate inevitability. However, when using a WAF there are options for your security teams while waiting for a patch.