DESIGNING FOR SECURITY AND USABILITY: FIGMA'S MODERN ENDPOINT STRATEGY

Summary from the TLDR InfoSec newsletter

Figma's security team developed an endpoint security strategy that emphasizes device quarantine, allowlisting, and access controls for improved usability and security. They implemented the Endpoint Security Baseline (ESB) using OSQuery to identify security risks, placing devices in quarantine if threats are detected until they can be resolved. Figma also deployed Santa for application allowlisting and Opal for just-in-time access to SaaS applications.