Skip to main content

Security

17 results

How we secure Figma’s internal systems with agents
July 29, 2026
By Matthew Sullivan, Brad Girardeau
Our security team built an AI agent that triages alerts, conducts forensic investigations, queries our security data lake, writes code to fix issues—and remembers what it learns. Here's how we cut alert time-to-resolution by 71% and fundamentally changed how our on-call engineers work.
Inside Figma
Engineering
Security
How Figma stays ahead of vulnerabilities with agents
July 23, 2026
By Rohan Sharma, Liam Buchan, Dave Martin
For the past year, agents at Figma have guarded code as it's written, reviewed every pull request, and audited a decade-old monorepo, all on one policy.
Inside Figma
Engineering
Security
Trust you can verify: Figma is now ISO 42001 certified
July 1, 2026
By Tushar Badlani
Saying you use AI responsibly is easy, but proving it to an accredited auditor is harder. We decided that was a standard worth meeting.
Inside Figma
Security
News
Visibility at scale: How Figma detects sensitive data exposure
October 23, 2025
By Dave Martin
Solving security challenges at scale requires creativity as much as rigor. To reduce the risk of sensitive data exposure, we built Response Sampling: a lightweight, real-time control that watches outbound responses, validates access, and provides an early warning system across our products.
Inside Figma
Engineering
Security
Rolling out Santa without freezing productivity: Tips from securing Figma’s fleet
July 2, 2025
By Aaron Osborne
We scaled Santa, an open-source binary authorization tool, across all Figmates’ laptops to boost endpoint security while keeping workflows seamless. Here’s how we tackled the challenges and ensured a smooth rollout.
Inside Figma
Engineering
Security
Designing for security and usability: Figma's modern endpoint strategy
April 4, 2025
By Lamarr Henry
At Figma, security doesn’t have to slow you down. We’ve designed our corporate endpoint security with UX in mind, making it seamless and self-serve.
Inside Figma
Engineering
Security
Enforcing device trust on code changes
December 8, 2023
By Griffin Choe
Here's how the Figma security engineering team leveraged commit signatures and Okta Device Trust certificates to protect GitHub release branches.
Inside Figma
Engineering
Security
Behind the scenes
Server-side sandboxing: Containers and seccomp
October 24, 2023
By Hongyi Hu, Max Serrano
Containers and secure computing mode (seccomp) are sandboxing primitives that offer a lighter weight alternative to virtual machines (VMs). Here we cover the differences between them, and how we use both at Figma to achieve security isolation.
Inside Figma
Security
Engineering
Server-side sandboxing: An introduction
October 24, 2023
By Hongyi Hu, Max Serrano
In this three-part series, our security engineering team shares practical tips for deploying and operating application sandboxing techniques. First up: evaluating the many sandboxing options, and how to think about the trade-offs between them.
Inside Figma
Security
Engineering
Server-side sandboxing: Virtual machines
October 24, 2023
By Hongyi Hu, Max Serrano
With so many sandboxing options, it’s daunting to choose the right one. Here, we dive into the virtual machine (VM) security model for sandboxing, including the engineering trade-offs to consider and how we use them at Figma to achieve security isolation.
Inside Figma
Security
Engineering
EU hosting for Figma and FigJam files
September 25, 2023
By Figma
At Figma, we speak to customers around the world every day to discuss ways we can make their Figma and FigJam experience even more seamless. And opening new office locations over the past 18 months is just one step we’ve taken to add support and ensure we understand what matters most to people in their regions.
Inside Figma
Security
FigJam
How Linear made the most of a DDoS
December 15, 2022
By Carly Ayres
On a good day, the Linear team helps companies build better software by streamlining issue tracking and project management. When they’re not doing that, they’re trying to get back to doing that as quickly as possible.
Maker Stories
Profiles & interviews
Engineering
Case study
Security