# Securing internal web apps

DevFeed: [Securing internal web apps](<https://devfeed.tech/articles/securing-internal-web-apps-9856.md>)

Original publisher: [Read original article](<https://www.figma.com/blog/inside-figma-securing-internal-web-apps/>)

Author: Max Burkhardt

Published: 2021-08-12T00:00:00Z

Content type: article

Language: en

Sources: [Figma Blog](<https://devfeed.tech/sources/figma-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Architecture & Design](<https://devfeed.tech/topics/architecture-design.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [Zero Trust](<https://devfeed.tech/topics/zero-trust.md>), [WebAuthn](<https://devfeed.tech/topics/webauthn.md>), [Figma](<https://devfeed.tech/topics/figma.md>), [Web](<https://devfeed.tech/topics/web.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [security](<https://devfeed.tech/tags/security.md>), [signing](<https://devfeed.tech/tags/signing.md>), [web](<https://devfeed.tech/tags/web.md>), [web-apps](<https://devfeed.tech/tags/web-apps.md>), [zero-trust](<https://devfeed.tech/tags/zero-trust.md>)

## AI overview

Figma's security team describes a system for securely providing access to internally developed web applications. The approach combines reusable cloud components and modern web security technologies, with a focus on smooth employee access, zero-trust principles, strong authentication including WebAuthn, and centralized authorization.

## Source excerpt

The Figma security team built out a system to securely provide access to internal applications. Security Engineer Max Burkhardt shares how we built the system, what we learned, and how this fits into our broader approach to security at Figma.