Answering IT & Security Questions
At larger companies, such as the Fortune 500, there are Security teams that audit new technologies being used inside the company.
If security engineers are interested in your project, some talking points that can help answer their questions include:
- Because Gatsby compiles your site to flat files, rather than having running app servers and databases users are targeting, it reduces the attack surface of the site to outsiders.
- Gatsby adds a layer of indirection which obscures your CMS — so even if your CMS is vulnerable, bad actors have no idea where to find it. This is in contrast to systems where bad actors can easily locate the admin dashboard at, eg,
/wp-adminand attempt to hack in.
- Gatsby lets you serve your site from a global CDN, likely whatever CDN your company is using (eg Akamai, Cloudflare, Fastly…), which effectively eliminates the risk of DDOS attacks.
It’s helpful to emphasize to security personnel that these benefits were a factor in why Gatsby was selected for the project. You chose Gatsby, in part, because it is more secure.
This is a stub. Help our community expand it.
Please use the Gatsby Style Guide to ensure your pull request gets accepted.
Edit this page on GitHub