A Quick Glance at Cross-Origin Resource Sharing Security Headers

Thanks to the rapid growth of JavaScript frameworks such as Angular, Vue, and React, CORS has become a popular word in the developer’s vocabulary.
When requesting information from an external source such as an API (a pretty common practice for client-… Continue reading A Quick Glance at Cross-Origin Resource Sharing Security Headers

Let’s Encrypt Revokes 3 Million Certificates Due to CAA Bug

Imagine receiving a TLS warning on your browser every time you visit your website for 60 days straight. Definitely not an ideal situation and you would certainly want to avoid it at all costs, correct?
Let’s Encrypt SSL, a certificate authority … Continue reading Let’s Encrypt Revokes 3 Million Certificates Due to CAA Bug

DDoS Targeting WordPress Search

Have you ever stopped to think about how many resources a search engine has or if your website could handle the same amount of search traffic that Google does?
Search engines play an important role on the internet and with how websites perform. One ma… Continue reading DDoS Targeting WordPress Search

Googlebot or a DDoS Attack?

A bot is a software application that uses automation to run scripts on the internet. Also called crawlers or spiders, these guys take on the simple yet repetitive tasks we do. There are legitimate bots and malicious ones. A Web Application Firewall (W… Continue reading Googlebot or a DDoS Attack?

Optimize Setup to Improve Your Website Resilience for DDoS Attacks

Distributed denial-of-service (DDoS) attacks can disrupt website traffic and impact any business. To help website owners and webmasters improve their website resilience to DDoS attacks, we have put together a series of posts.
Here are the topics that … Continue reading Optimize Setup to Improve Your Website Resilience for DDoS Attacks

How to Improve Your Website Resilience for DDoS Attacks – Part III – WAF

In the first post of this series, we talked about the practices that will optimize your site and increase its resilience to DDoS attacks. In the second post, we focused on caching best practices that can reduce the chances of a DDoS attack taking down… Continue reading How to Improve Your Website Resilience for DDoS Attacks – Part III – WAF

Real-Time Fine-Tuning of the WAF via API

Though the Sucuri Firewall is simple to set up and protects your website immediately, it’s possible to have granular control of the WAF by using an API.
For instance, there’s a specific filter inside the WAF dashboard called Emergency DDoS… Continue reading Real-Time Fine-Tuning of the WAF via API

How to Improve Website Resilience for DDoS Attacks – Part II – Caching

In the first post of this series, we talked about the practices that will optimize your site and increase your website’s resilience to DDoS attacks. Today, we are going to focus on caching best practices that can reduce the chances of a DDoS att… Continue reading How to Improve Website Resilience for DDoS Attacks – Part II – Caching

How to Improve Website Resilience for DDoS Attacks – Part I

Denial of Service (Dos) and Distributed Denial of Service (DDoS) attacks are unforgiving. They test the limits of your web server and application resources by sending spikes of fake traffic to your website. It is also notoriously difficult to conduct … Continue reading How to Improve Website Resilience for DDoS Attacks – Part I