Wix already had security processes in place including shift-left, and production-level processes that focused on the runtime environment (server/ OS) and perimeter (WAF/ HTTP access logs). Wix plans to open source the new security software in the coming months. The logs are aggregated to a central database which allows the custom solution to scale successfully while keeping site load times and latencies low. Once a security exception is found in an application log, a member of the security team is notified and the threat is addressed. Wix’s custom security system detects security vulnerabilities by using logic that looks for the opposite of what’s expected from a secure application and searches for those exceptions in the application logs, according to a blog post written by Wix Security Engineer Moti Harmats. It’s pretty wild to read about all these different monitoring, observability, and security tools as they come out to combat the ever-growing amount of security threats.

Security vulnerabilities happen, even with shift-left and security testing done in the development phase, there are still vulnerabilities in an application’s production level. Website building platform Wix recently created a simple but effective logic-based monitoring process that detects application-level vulnerabilities in production-level environments in real-time.

Wix application