# Rolling out Santa without freezing productivity: Tips from securing Figma's fleet

DevFeed: [Rolling out Santa without freezing productivity: Tips from securing Figma's fleet](<https://devfeed.tech/articles/rolling-out-santa-without-freezing-productivity-tips-from-securing-figma-s-fleet-10031.md>)

Original publisher: [Read original article](<https://www.figma.com/blog/rolling-out-santa-without-freezing-productivity/>)

Author: Aaron Osborne

Published: 2025-07-02T00:00:00Z

Content type: article

Language: en

Sources: [Figma Blog](<https://devfeed.tech/sources/figma-blog.md>)

Topics: [Endpoint security](<https://devfeed.tech/topics/endpoint-security.md>), [Security](<https://devfeed.tech/topics/security.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [macOS](<https://devfeed.tech/topics/macos.md>), [Credential theft](<https://devfeed.tech/topics/credential-theft.md>), [App](<https://devfeed.tech/topics/app.md>), [Tooling](<https://devfeed.tech/topics/tooling.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [Script](<https://devfeed.tech/topics/script.md>), [Extension](<https://devfeed.tech/topics/extension.md>)

Tags: [authorization](<https://devfeed.tech/tags/authorization.md>), [browser](<https://devfeed.tech/tags/browser.md>), [credential-theft](<https://devfeed.tech/tags/credential-theft.md>), [endpoint-security](<https://devfeed.tech/tags/endpoint-security.md>), [macos](<https://devfeed.tech/tags/macos.md>), [malware](<https://devfeed.tech/tags/malware.md>), [open-source](<https://devfeed.tech/tags/open-source.md>), [santa](<https://devfeed.tech/tags/santa.md>), [security](<https://devfeed.tech/tags/security.md>), [workflows](<https://devfeed.tech/tags/workflows.md>)

## AI overview

Figma describes rolling out Santa, an open-source binary authorization tool, across its employees' macOS laptops to improve endpoint security without disrupting productivity. The article covers monitoring-based ruleset development, user self-service for unblocking, file access authorization for browser cookies, and a staged rollout.

## Source excerpt

We scaled Santa, an open-source binary authorization tool, across all Figmates' laptops to boost endpoint security while keeping workflows seamless. Here's how we tackled the challenges and ensured a smooth rollout.