September 2022 Summaries

Evervault provides a quick and efficient way to encrypt strings using its transparent encryption proxy, allowing users to secure data with minimal adjustments to existing code. The process begins by setting up a RequestBin to inspect HTTPS requests, followed by creating an Inbound Relay through the Evervault Dashboard to forward requests to the designated endpoint. Users can then utilize cURL commands to send data, initially unencrypted, to the relay domain, where headers are appended. By configuring the Encrypted Fields in the Evervault Dashboard, users can specify which fields to encrypt, ensuring that sensitive data is automatically secured before reaching the server. This approach enables handling both encrypted and unencrypted fields within the same request, promoting efficient data protection at scale.

This blog post explores the use of Evervault's Inbound Relay, an invisible encryption proxy, to secure sensitive data in a web application by encrypting data fields before they reach server infrastructure. Using Node.js and a MongoDB Atlas database, the demonstration walks through building a CRUD application that collects user data through an HTML form, encrypts it with Inbound Relay, and stores the encrypted data in MongoDB. The process involves setting up a local server with Express, creating a form to collect data, establishing a database connection, and integrating Evervault's API for encryption. Additionally, the tutorial demonstrates how to decrypt and read data using Evervault's SDK and outlines the use of Ngrok for local tunneling and domain provisioning. The guide emphasizes the importance of encryption to protect against unauthorized access to plaintext data and offers a hands-on approach to implementing field-level encryption in web applications.

Evervault is on a mission to integrate security into software development from the very beginning, emphasizing the importance of encryption in protecting data against breaches and zero-day attacks. The pressure on developers to quickly ship new features often leads to security being deprioritized, resulting in vulnerabilities that hackers can exploit. While compliance with security frameworks becomes essential as companies grow, it often creates tension with actual security needs, as compliance does not equate to true protection against cyber threats. Many companies rely on an array of third-party security tools that address symptoms rather than the root cause of data insecurity. Evervault advocates for a shift towards robust encryption practices, where developers manage encryption keys and processes themselves, ensuring that sensitive data is protected from the outset. Their platform aims to make encryption accessible and easy to implement correctly, promoting a future where data breaches become obsolete due to built-in security measures.