Secure by DesignSecure-by-Default Software
Front
Secure-by-default software is safe out of the box.
It ships with hardened settings that protect against common attacks. No extra tools, purchases, or expertise required.
Default configurations should minimize risk for all users, especially those without dedicated security teams. Good defaults protect the distracted, busy, and overwhelmed, not just the experts.
Blaming users for incidents caused by dangerous factory defaults is like blaming a driver for not reading the manual when the airbags were turned off at the factory.
Back
Discussion prompts
- What are the default security settings in your product — and are they as tight as they could be?
- Have you ever shipped a product where the secure option required extra steps to enable?
- How do your product defaults compare to the product's threat model? Are they in strong alignment?