Sqreen wants to become the IFTTT of web app security

French startup Sqreen recently launched a Security Hub with dozens of plugins to put you in control of the security of your web app. In many ways, it feels like enabling tasks on popular automation service IFTTT.

Sqreen participated in TechCrunch’s Startup Battlefield and Y Combinator’s current batch. The vision of the product hasn’t changed. Sqreen lets you protect your web service with little effort from your side.

Big companies have dedicated security teams that protect services, try to run attacks to find weaknesses and more. Smaller companies don’t necessarily have enough time and money to build a dedicated team. But your product is still vulnerable to SQL injections, XSS attacks and brute-force attacks.

Sqreen isn’t a firewall. You just have to install a library package on your server and add a couple of lines at the top your source code to require the Sqreen module in your application.

Once this is done, Sqreen monitors attacks in real time without a big performance hit — the startup says there’s a 4 percent CPU overhead. Sqreen now works for web apps in Node.js, Ruby, PHP, Python or Java.

In addition to protecting you against common attacks, Sqreen makes security recommendations so that you can regularly fix vulnerabilities. And with GDPR coming soon, tech companies have a greater responsibility when it comes to protecting customer data and disclosing hacks.

Customers wanted to know more about what Sqreen was doing. That’s why Sqreen launched a security hub with documented plugins.

“All security vendors are very secretive,” Sqreen co-founder and CEO Pierre Betouin. “Usually, you can’t test the product and you have no information on what they do. We were like this at the beginning of Sqreen. Our positioning was really ‘install our library and we’ll cover a range of security features.’”

“We had a big push back. So we wondered how we could be more transparent, provide something more rational. We explain each plugin completely.”

You can find a plugin to protect you against SQLite injections, vulnerable dependencies, XSS Javascript injections in various frameworks, bot activity, etc.

Sqreen will recommend plugins for your app depending on the technologies and frameworks you’re using. You can then enable or disable each plugin and configure notifications on Slack or PagerDuty for instance.

In the future, you can imagine that third-party companies could contribute to this marketplace and add new plugins. Sqreen is also working on other plugins related to email abuse and payment page protection.

In addition to those new features, Betouin is moving to San Francisco and opening an office there. Companies like Front, Mindbody, BlaBlaCar, Triplebyte, Toptal and Algolia are now using Sqreen.

Comments

Peel Turns Your Apple Watch Into A Universal Remote Control

Does it make sense to use your Apple Watch as a remote control for your media devices? Smart remote maker Peel thinks so, having just launched a universal remote control application for the Apple Watch which lets you operate over 400,000 models of home electronics, including not only televisions, but also DVD players, and even audio and streaming devices, like the Roku. The Apple Watch app is actually an extension of the company’s existing smart remote app for iPhone . And while in a few cases the new Watch app will allow you to control your devices via Wi-Fi, for the most part, it will require the Pronto hardware just like the iPhone version does. The Pronto 360-degree IR blaster is what turns the iPhone, and now the Apple Watch, into a smart universal remote control. A $49.99 piece of hardware about the size of a salt shaker, Pronto sits in your entertainment center to provide the IR capabilities required to operate your TV and other electroni...

How to Install and Uninstall Graphics Tools in Windows 10?

Windows 10 has included some optional features which are in-built in the operating system but not installed by default. The Graphics Tool is one such package. The Graphic Tools are needed for users who use Visual Studio to develop DirectX apps or games. The tools have many utility like Graphics debugging, tracing Direct3D calls, inspection of parameters, analyzing Direct3D calls, experiments with shaders and many more. Visual Studio has a Graphics Frame Analysis tool that operates on graphics debugging log. It also collects all necessary information to draw Direct3D calls. The Graphics tools also consist of GPU Usage which lets you analyse and track GPU use in real time and at the same time collects and analyzes the timing data of the workloads. Steps to Install and Uninstall Graphics Tools in Windows 10? 1. Open the Start Menu, go to Settings and tap on System . 2. Go to Apps and features . 3. In the right panel, tap Manage ...

Intel announces the first 14 nanometre processor

At the Computex conference in Taipei, chipmaker Intel has revealed a fanless mobile PC reference design using the first of its next-generation 14nm "Broadwell" processors. The 2 in 1 pictured here is a 12.5" screen that is just 7.2 mm thick with keyboard detached and weighs 670 grams. The Surface Pro 3 – for comparison – is 9.1 mm thick and weighs 800 grams. It includes a media dock that provides additional cooling for a burst of performance. The next-generation chip is purpose-built for 2 in 1s and will hit the market later in 2014 . Called the Intel Core M, it will be the most energy-efficient Intel Core processor in the company's history with power usage cut by up to 45 percent, resulting in 60 percent less heat. The majority of designs based on this new chip are expected to be fanless, with up to 32 hours of battery life, offering both a lightning-fast tablet and razor-thin laptop. Intel is also delivering innovation and performance for the ...

Google, Microsoft, Mozilla And Others Team Up To Launch WebAssembly, A New Binary Format For The Web

Google, Microsoft, Mozilla and the engineers on the WebKit project today announced that they have teamed up to launch WebAssembly, a new binary format for compiling applications for the web. The web thrives on standards and, for better or worse, JavaScript is its programming language. Over the years, however, we’ve seen more and more efforts that allow developers to work around some of the limitations of JavaScript by building compilers that transpile code in other languages to JavaScript. Some of these projects focus on adding new features to the language (like Microsoft’s TypeScript) or speeding up JavaScript (like Mozilla’s asm.jsproject). Now, many of these projects are starting to come together in the form of WebAssmbly. The new format is meant to allow programmers to compile their code for the browser (currently the focus is on C/C++, with other languages to follow), where it is then executed inside the J...

Barnes & Noble is killing itself

I’ve been chronicling the slow demise of B&N for years now, watching the company bleed out, drop by drop, until it has become a shell of its former value. B&N was a cultural center in places without cultural centers. It was a stopover on rainy days in New York, Chicago, and Cleveland and it was a place you could go to get your kids’ first books. That’s mostly over now. On Monday the company laid off 1,800 people. This offered a cost savings of $40 million. But that’s particularly interesting. That means each of those people made an average of $22,000 or so per year and minimum wage workers – hourly folks who are usually hit hardest during post-holiday downturns – would be making $15,000. In fact, what B&N did was fire all full time employees at 781 stores. From a former employee: On Monday morning, every single Barnes & Noble location told their full-time employees to pack up and leave. The eliminated positions were as follows: the head cashiers (those are the pe...

Exciting Technology

Search This Blog