Blog

Latest News From Blog

Other

Cybersecurity career mistakes

I have personally made many mistakes during my career. Does that qualify me to give advice? I am not sure. Nevertheless, as a cautionary tale, I can list some mistakes that you potentially want to avoid if you can recognize them.Mistake 1: Going against the flowIf you can identify themes and ride them, it will take you farther than fighting them. For example, when terms like APT, Zero Trust, etc, become popular, you will fare better by discussing what they are, their impact, or how any industry, country, or population can be affected, you can’t go wrong with “The impact of APT’s in bakery shops led by Latinos in Canada” for example.Mistake 2: Not understanding your strengthsThere are many personal qualities that can make you more successful in particular roles. Understand how are your soft skills, hard skills, communication, empathy, technical capability, etc, and play them. There are so many different roles, technical and managerial, that for sure there is something where you are a great fit.Mistake 3: Not taking care of your networkAs your career advances, what you know is less important, and who you know becomes more important. It does not matter if you are looking for your next position, selling products or services, or finding providers. Contacts normally will take you farther faster than going solo. A nice way to gain contacts is by participating in professional associations.Mistake 5: Losing a feeling of the job marketGiving up opportunities out of comfort is a short-term win, a long-term loss. Avoiding change because you don’t want to move to another country, or your current position is too cozy may lead to missing opportunities that may not come back. Yes, there are other things in life than your career. Your mileage may vary.Mistake 6: Not learning things that are not technicalWhile it is possible to spend your whole career doing only one thing, you probably would prefer to move to higher, better-paid positions. This implies learning about project management, business management, marketing, etc. Remember cybersecurity is a business. Rather than getting many certificates on the same subject, it is better to go for a variety, including out of cybersecurity.Mistake 7: Not getting professional certificationsGoing back to mistake No 1, it does not matter if you agree with what they teach or not. Most companies don’t have people qualified enough in cybersecurity, even in the IT department, to evaluate if YOU are qualified, so they use certifications to filter candidates. Get at least a couple of relevant certificates to make sure you make it to the interviews phase.Mistake 8: Waiting for someone to promote youGetting promoted while in the same company happens less frequently than moving up when changing jobs, in my experience. Also, a promotion is not something someone grants to you by saying: Hey, now you are Senior CyberWhatever, YOU make yourself Senior/Chief/VP et al by doing the deeds of the position before you are named. When someone “promotes” you, they are just catching up with the reality of your current responsibilities and duties most of the time.

Other

What is Cybersecurity and Why It is Important?

Cybersecurity is the protection to defend internet-connected devices and services from malicious attacks by hackers, spammers, and cybercriminals. The practice is used by companies to protect against phishing schemes, ransomware attacks, identity theft, data breaches, and financial losses.Look around today's world, and you'll see that daily life is more dependent on technology than ever before. The benefits of this trend range from near-instant access to information on the Internet to the modern conveniences provided by smart home automation technology and concepts like the Internet of Things.With so much good coming from technology, it can be hard to believe that potential threats lurk behind every device and platform. Yet, despite society's rosy perception of modern advances, cyber security threats presented by modern tech are a real danger.A steady rise in cybercrime highlights the flaws in devices and services we've come to depend on. This concern forces us to ask what cyber security is, why it's essential, and what to learn about it.What is Cyber Security?Cyber security is a discipline that covers how to defend devices and services from electronic attacks by nefarious actors such as hackers, spammers, and cybercriminals. While some components of cyber security are designed to strike first, most of today's professionals focus more on determining the best way to defend all assets, from computers and smartphones to networks and databases, from attacks.Cyber security has been used as a catch-all term in the media to describe the process of protection against every form of cybercrime, from identity theft to international digital weapons. These labels are valid, but they fail to capture the true nature of cyber security for those without a computer science degree or experience in the digital industry.Cisco Systems, the tech conglomerate specializing in networking, the cloud, and security, defines cyber security as “…the practice of protecting systems, networks, and programs from digital attacks. These cyberattacks are usually aimed at accessing, changing, or destroying sensitive information; extorting money from users; or interrupting normal business processes.”How Does Cyber Security Work? The Challenges of Cyber SecurityCyber security encompasses technologies, processes, and methods to defend computer systems, data, and networks from attacks. To best answer the question “what is cyber security” and how cyber security works, we must divide it into a series of subdomains:Application SecurityApplication security covers the implementation of different defenses in an organization’s software and services against a diverse range of threats. This sub-domain requires cyber security experts to write secure code, design secure application architectures, implement robust data input validation, and more, to minimize the chance of unauthorized access or modification of application resources. Cloud SecurityCloud security relates to creating secure cloud architectures and applications for companies that use cloud service providers like Amazon Web Services, Google, Azure, Rackspace, etc.Identity Management and Data SecurityThis subdomain covers activities, frameworks, and processes that enable the authorization and authentication of legitimate individuals to an organization’s information systems. These measures involve implementing powerful information storage mechanisms that secure the data, whether in transition or residing on a server or computer. In addition, this sub-domain makes greater use of authentication protocols, whether two-factor or multi-factor.Mobile SecurityMobile security is a big deal today as more people rely on mobile devices. This subdomain protects organizational and personal information stored on mobile devices like tablets, cell phones, and laptops from different threats like unauthorized access, device loss or theft, malware, viruses, etc. In addition, mobile security employs authentication and education to help amplify security.Network SecurityNetwork security covers hardware and software mechanisms that protect the network and infrastructure from disruptions, unauthorized access, and other abuses. Effective network security protects organizational assets against a wide range of threats from within or outside the organization.Disaster Recovery and Business Continuity PlanningNot all threats are human-based. The DR BC subdomain covers processes, alerts, monitoring, and plans designed to help organizations prepare for keeping their business-critical systems running during and after any sort of incident (massive power outages, fires, natural disasters), and resuming and recovering lost operations and systems in the incident’s aftermath. User EducationKnowledge is power, and staff awareness of cyber threats is valuable in the cyber security puzzle. Giving business staff training on the fundamentals of computer security is critical in raising awareness about industry best practices, organizational procedures and policies, and monitoring, and reporting suspicious, malicious activities. This subdomain covers cybersecurity-related classes, programs, and certifications.

Other

Red Team vs. Blue Team: What’s the Difference?

The software industry often borrows names and processes from the US Army. One example is when the army splits its team into blue and red.The blue one is defending a target, and the red one is attacking.Some software companies adopted the same approach. The blue team consists of experienced experts responsible for keeping company assets secure. In turn, the red team specializes in finding a way to bypass security measures.Find out why you should have a dedicated red team that constantly tests your cybersecurity and how your organization can benefit from creating its own red and blue teams.The blue team is responsible for maintaining an IT infrastructure. They are defensive security professionals. Areas of their specialization include:network,identity management,cloud,user devices, and many more.The required skillset depends on the company's infrastructure.Together they ensure that all solutions are properly configured and maintained to ensure that all company assets are secure. Their skillset consists of understanding company security strategy, analytical skills to identify threats, and hardening skills. That means they know how to reduce the attack surface and eventually spread security awareness in the organization.Examples of blue team exercisesThe blue team implements a set of exercises to verify security.The first (and key) step is ensuring that all security devices and tools deployed in the organization are properly configured and up-to-date.That means checking the firewall, IDS/IPS antivirus configuration hardening, and update management.The blue team needs to ensure that access to assets in the company is limited. They do it by reviewing permissions to networks and assets, in general, using the least-privileged access concept. That means the user should not have access to something they do not need.The best way to grow in a blue team is to monitor new public security tools and verify if they are correctly detected or blocked.It is a great way to ensure that the team is aware of the newest threats and if current tools and processes are sufficient to handle them properly.The results from such exercises are:improved knowledge of the blue team members,new detection rules in detection and prevention systems,configuration improvements,and scheduling urgent software updates.Another exercise the blue team can do is to look for publicly available servers under the company DNS address. They do that to ensure that all of them are monitored and properly managed.What is the red team?A red team can simulate attacks on company assets.They consist of security professionals qualified in the:network,application,operating system security vulnerabilities,malware development,social engineering,and sometimes hardware and physical security.Their skillset is similar to what malware operators or hacking groups like LAPSUS$ have, but they use it only ethically. They are developing TTPs (Tactics, Techniques, and Procedures) to simulate already known and new attacks.As many companies use different software and have various infrastructure approaches, it requires a great effort to ensure that the team can deliver satisfying results for the exercises. For example, there can be a massive difference in attacks on on-premise infrastructure vs. the cloud-based one.Examples of red team exercisesDepending on the team structure, red teams may work to break security controls to achieve target access. They can learn how to execute sophisticated attack techniques using training, research, and publicly available articles and tools.Sometimes these security teams arrange access to widespread business tools. They do that to see how they work, and to find security vulnerabilities or common misconfigurations that they can use for attacks.For learning purposes, the IT security community provides applications and virtual machines that are deliberately broken. That way, they want to show typical vulnerabilities for specific cases.With all that knowledge, red team members can provide attack simulations to test the security controls of an organization. Typically there is a specific target.It can be, for example, Domain Admin in Active Directory services, high-value data in the database, or proof of getting access to a restricted area.Another thing to clarify before the test is to confirm the scope. A team needs to agree on what to attack, what is prohibited, and who to contact in case of any issues.A good example is a letter stating that this is a test with contact info to a person responsible for a test on the company side.. After the tests, the team delivers a report with the scope, findings, and recommendations. It may contain all of the executed steps so that blue team members can review them, find blind spots and remove them.Security systems are getting more complex each day. More and more processes are being automated and moved to the company infrastructure. Companies are using the new web, mobile applications, appliances, and even Internet of Things devices. In the age of digital acceleration, it is the only way to keep up with the market.Benefits of red team vs. blue team approachUnfortunately, each of these elements is a potential security risk if not properly assessed and verified in the whole environment.Blue teams can do their best given limited budgets, headcount, experience, and priorities to ensure the company is safe.But even then, there is a risk that they missed something or were wrongly prioritized. And then the breach can happen.That is why red team exercises on company assets are crucial to assess a security posture. By doing such exercises regularly, it is possible to limit how long a vulnerability is present in the system and how severe damage it can introduce to it.It is also a good idea to retest fixes as soon as they are published. That way the team can be sure that they are sufficient to resolve the vulnerability.It is also worth noting that even if they did not detect vulnerabilities in a recent test, the threat landscape is still evolving.New approaches and techniques to break into the systems are invented every day. Finally, it is a good way of elevating awareness about social engineering attacks in the whole organization.Purple teamingQuite a new approach for collaboration between the Blue team and Red team is a security methodology called Purple teaming. That means closer cooperation between the teams to improve spreading awareness and boost the performance of all team members.For a red team member, it is valuable to see how defenders usually work with services they need to protect. In turn, a blue team member can learn new attack techniques and tools with initial research delivered by a red team member.Purple teaming can improve the security posture of an organization. Keep in mind though that if there is no red team present in the organization, such exercises can be arranged together with penetration testing as a form of a workshop.

Cloud Services

Cloud Network Security

What is Cloud Network Security?Cloud network security is a category of tools and capabilities that address the virtualized network security model. This includes cloud security model integration and threat modeling to provide an enhanced level of endpoint security for networks and applications. Cloud network security services can provide unified access to remote servers, control access to infrastructure resources, and establish secure connections between the internet, private clouds, and public cloud providers. The services also integrate network and application security capabilities within the cloud security model to provide robust coverage for both network and cloud applications.The cloud network security model benefits from the integrated capabilities of Secure Access Service Edge (SASE) and SD-WAN technologies that empower organizations to deploy their networks with self-service controls and security options.SASE security services also include traditional endpoint security services and solutions that analyze network traffic for threats such as phishing attacks, malware, and malicious traffic. The advantages of cloud network security include the flexibility to deploy IT resources across multiple sites to form a secure, global virtualized network topology. Moreover, continuous monitoring and alerting of network security configurations and resources eliminates costly network management tasks.SD-WAN and Cloud Network SecuritySDNs are the key component of cloud network security architectures that encompass the integrated capabilities of both Secure Access Service Edge (SASE) and SD-WAN technologies.An SD-WAN is also known as a type of software-defined wide-area network. It’s virtualized so that the network is abstracted from the datacenter or branch office hardware to create an easily configurable and scalable overlay-wide area network distributed across local and global sites. The SD-WAN implementation of Software Defined Network (SDN) technology makes it more reliable, scalable and cost-effective than VPN-based WAN solutions because it takes a software-based approach to build and extend enterprise networks beyond the core SDN.Organizations today can use SD-WAN solutions to connect branch offices to their corporate networks instead of using traditional and expensive multiprotocol label switching (MPLS) connections, firewalls or proprietary hardware.SD-WAN virtual appliances, connected by encrypted tunnels, connect to sets of network services that provide enhanced functionality across the virtualized network. Moreover, traffic reaching an SD-WAN appliance can be classified based on application or service type which is then prioritized using centrally-managed policies to optimize network traffic.SD-WANs have many benefits for distributed organizations that leverage the cloud ranging from network topology simplification, internet traffic prioritization, and cost reduction to scalability and integrated security.Central SD-WAN management with traffic routing based on application policies lets IT managers automate deployment and configuration processes thereby reducing the complexity and resources required to manage a WAN. Enterprise applications can also be aggregated, integrated, and controlled from an SD-WAN portal, further simplifying SD-WAN management.With internet traffic prioritization, SD-WANs can identify critical data as it moves through the network, supplanting web surfing and video streaming, which in turn boosts network performance and efficiency. Content filtering capabilities can restrict access or allocate bandwidth to selected sites resulting in additional network efficiency.Finally, because SD-WANs eliminate physical equipment, organizations can save administration time and labor costs normally associated with networking hardware deployments. In addition, replacing expensive MPLS with cloud-based broadband connectivity options further reduces costs.Highlighting the Benefits of Cloud Network SecurityNetwork topology simplificationPolicy-based. internet traffic routingSecure remote and mobile network accessPublic and private cloud deploymentsCost-effective network scalability

Other

WHAT IS THE CYBER KILL CHAIN? PROCESS & MODE

What is the Cyber Kill Chain?The cyber kill chain is an adaptation of the military’s kill chain, which is a step-by-step approach that identifies and stops the enemy activity. Originally developed by Lockheed Martin in 2011, the cyber kill chain outlines the various stages of several common cyberattacks and, by extension, the points at which the information security team can prevent, detect or intercept attackers.The cyber kill chain is intended to defend against sophisticated cyberattacks, also known as advanced persistent threats (APTs), wherein adversaries spend significant time surveilling and planning an attack. Most commonly these attacks involve a combination of malware, ransomware, Trojans, spoofing, and social engineering techniques to carry out their plan.8 Phases of the Cyber Kill Chain ProcessLockheed Martin’s original cyber kill chain model contained seven sequential steps:Phase 1: ReconnaissanceDuring the Reconnaissance phase, a malicious actor identifies a target and explores vulnerabilities and weaknesses that can be exploited within the network. As part of this process, the attacker may harvest login credentials or gather other information, such as email addresses, user IDs, physical locations, software applications, and operating system details, all of which may be useful in phishing or spoofing attacks. Generally speaking, the more information the attacker is able to gather during the Reconnaissance phase, the more sophisticated and convincing the attack will be and, hence, the higher the likelihood of success.Phase 2: WeaponizationDuring the Weaponization phase, the attacker creates an attack vector, such as remote access malware, ransomware, virus or worm that can exploit a known vulnerability. During this phase, the attacker may also set up back doors so that they can continue to access to the system if their original point of entry is identified and closed by network administrators.Phase 3: DeliveryIn the Delivery step, the intruder launches the attack. The specific steps taken will depend on the type of attack they intend to carry out. For example, the attacker may send email attachments or a malicious link to spur user activity to advance the plan. This activity may be combined with social engineering techniques to increase the effectiveness of the campaign.Phase 4: ExploitationIn the Exploitation phase, the malicious code is executed within the victim’s system.Phase 5: InstallationImmediately following the Exploitation phase, the malware or other attack vector will be installed on the victim’s system. This is a turning point in the attack lifecycle, as the threat actor has entered the system and can now assume control.Phase 6: Command and ControlIn Command & Control, the attacker is able to use the malware to assume remote control of a device or identity within the target network. In this stage, the attacker may also work to move laterally throughout the network, expanding their access and establishing more points of entry for the future.Phase 7: Actions on ObjectiveIn this stage, the attacker takes steps to carry out their intended goals, which may include data theft, destruction, encryption, or exfiltration.Over time, many information security experts have expanded the kill chain to include an eighth step: Monetization. In this phase, the cybercriminal focuses on deriving income from the attack, be it through some form of ransom to be paid by the victim or selling sensitive information, such as personal data or trade secrets, on the dark web.Evolution of the Cyber Kill ChainGenerally speaking, the earlier the organization can stop the threat within the cyber attack lifecycle, the less risk the organization will assume. Attacks that reach the Command and Control phase typically require far more advanced remediation efforts, including in-depth sweeps of the network and endpoints to determine the scale and depth of the attack. As such, organizations should take steps to identify and neutralize threats as early in the lifecycle as possible in order to minimize both the risk of an attack and the cost of resolving an event.As noted above, the cyber kill chain continues to evolve as attackers change their techniques. Since the release of the cyber kill chain model in 2011, cybercriminals have become far more sophisticated in their techniques and more brazen in their activity.While still a helpful tool, the cyberattack lifecycle is far less predictable and clear-cut today than it was a decade ago. For example, it is not uncommon for cyber attackers to skip or combine steps, particularly in the first half of the lifecycle. This gives organizations less time and opportunity to discover and neutralize threats early in the lifecycle. In addition, the prevalence of the kill chain model may give cyberattackers some indication of how organizations are structuring their defense, which could inadvertently help them avoid detection at key points within the attack lifecycle.Role of the Cyber Kill Chain in CybersecurityDespite some shortcomings, the Cyber Kill Chain plays an important role in helping organizations define their cybersecurity strategy. As part of this model, organizations must adopt services and solutions that allow them to:Detect attackers within each stage of the threat lifecycle with threat intelligence techniquesPrevent access from unauthorized usersStop sensitive data from being shared, saved, altered, exfiltrated, or encrypted by unauthorized usersRespond to attacks in real-timeStop the lateral movement of an attacker within the network

Network Security

Computer Network Defense

A CDN or Content Delivery Network is a global network of servers that serves web content to end-users more quickly by storing copies of files such as images in locations that are geographically closer to the users requesting that content. By using a CDN, websites reduce the load on their origin servers, which can enable them to serve more users without fear of overloading their servers. CDNs improve user experience by contributing to faster website load times, and also improve the security of websites by enabling them to mitigate the impacts of distributed denial of service (DDoS) attacks, and by giving them the ability to install additional security proxies through the content delivery network.Benefits of CDNsSome of the benefits of using a Content Delivery Network include:i. Decrease webpage and application load time: By caching copies of static files and delivering them from servers that are closer in distance to end-users, website load times are reduced. This improves user experience and has other benefits, such as increasing search engine optimization, as search engines take website performance into account when ranking pages.ii. Protect against DDoS and other attacks: CDNs protect a website’s origin server from DDoS attacks and other threats by enabling sites to handle increased traffic. Additionally, other security tools such as firewalls can be installed on the CDN and sit between a malicious user and a website.iii. Improve scalability: Content Delivery Networks allow websites and applications to scale up quickly, as CDNs can handle traffic spikes without websites needing to increase their origin server capacity significantly.iv. Reduced bandwidth and hosting costs: As CDNs cache certain web content, they reduce the amount of bandwidth needed at the origin or host server. Bandwidth expenses vary based on the hosting provider, but can be costly and unpredictable, so utilizing a CDN can save on hosting costs.v. Minimizes website downtime: Having high uptime is critical for businesses that rely on their website or application to generate revenue, such as Software as Service applications and eCommerce sites. CDNs protect against downtime through the security measures mentioned above, and can even sometimes deliver a cached version of the site if the origin server is down.There are a few different types of CDN in operation today, including CDNs operated by telecommunication companies and private CDNs, which are purpose-built for one company. Netflix and Facebook are examples of companies that have built their own Content Delivery Networks due to their large global presence and the huge amount of content they deliver each day. However, most businesses and individuals today looking for a CDN will use a commercial Content Delivery Network, such as Akamai, Cloudflare, or Fastly. While each CDN provider has some unique features, all CDNs work using the same basic principles.How CDNs cache contentAt the heart of Content Delivery Networks, also sometimes referred to as edge networks, is a set of Points of Presence or PoPs, which are groups of servers in multiple locations around the world. The servers hosted in each PoP are known as edge servers, as they are unique to the origin server which hosts the full version of a website or software, and are located at the “edge” of a network closest to the end-user. CDNs vary in the number of PoPs they include, with some networks having thousands of PoPs in all continents, and others focusing their PoPs in key areas they serve.Edge servers serve multiple purposes, including hosting cached files to improve performance and protecting the origin server by directing traffic to the CDN instead of directly to the origin. CDNs can host a variety of software tools that help with performance and security as edge servers act as reverse proxies, which intercept web traffic and handle it through a set of rules based on the software installed on your edge server. While CDNs are most known for caching content, they can also host threat detection software, image resizing tools, and much more. Below we outline two of the most common use cases for CDNs–caching content and protecting websites from attack.This type of caching is called server-side caching, and can also be set up without the use of a Content Delivery Network through programs such as Varnish Cache which sit in front of the origin server. However, by using server-side caching in conjunction with a CDN, websites can deliver even more optimal performance. The other commonly known caching method is client-side or browser-caching, in which copies of files are stored in a user’s local browser. Browser-caching means that if a visitor repeatedly visits a webpage, certain objects on that page, such as logo files, will be stored in their browser cache and so are delivered even more quickly. Most websites use a combination of browser caching and server-side caching, usually through a CDN, to realize the fastest website speeds possible.To ensure the cached files served from a CDN are up-to-date, websites enter information that tells the caching mechanism when the files expire. If a CDN discovers that a file has expired, it will re-fetch that file from the origin the first time it is requested. This is known as a “cache pull,” and is beneficial as this method means the CDN only requests files when they are needed. Another caching technique is known as “cache push,” when a website proactively tells the cache to update its files. This method can be used for larger files, or when a website updates most of its content and wants to ensure the cache has the updated content.How CDNs improve website securityIn addition to improving the performance of a website, Content Delivery Networks also improve the security of websites by detecting threats, blocking malicious traffic, and protecting the origin server from attacks. By utilizing a CDN rather than sending traffic directly to an origin server, the origin server is protected from Distributed Denial of Service attacks, in which attackers attempt to take down websites by sending a huge amount of traffic to a website at once. CDNs both distribute the traffic among multiple PoPs, enabling it to withstand the additional traffic, and can include tools that go a step further in protecting from DDoS and other security threats.Other security tools which are offered with many CDNs include firewalls and advanced threat detection software which will stop harmful traffic from getting through to the origin server. Firewalls monitor traffic and block certain traffic from entering a website based on a set of rules, such as IP address, and more advanced firewalls may examine the contents of a data packet or create smart rules to identify threats. CDNs may also include tools that mitigate the impact of harmful bots, secure APIs and manage the TLS/SSL certificates of websites, ensuring that traffic is encrypted. All of these security tools can ensure websites stay online, threats are quickly dealt with, and there is no threat to brand reputation based on security leaks.How to choose a CDNThere are many CDN solutions available, and every business or individual using a CDN may have different needs and priorities. When considering what Content Delivery Network to utilize, consider these factors:CDN use case: Depending on the function that your website or application serves, you may be serving different types of content. If you are planning to cache mostly static content such as images, most CDNs will be able to fulfill your needs, but if you want to cache dynamic content or personalized assets you should ensure your CDN will be able to handle those use cases.PoP Network: CDNs are intended primarily to deliver content to end-users more quickly, so the location of the Points of Presence is critical when determining what CDN to use. If a majority of your traffic comes from one region, ensure that the CDN you choose has a PoP or multiple PoPs in that location. If your traffic is globally distributed, choose a CDN with many PoPs around the globe.Available features: Content Delivery Networks can include hundreds of different products for website security, performance, and scalability. These range from basic caching tools to image optimization, advanced firewalls, and more. When determining what CDN to utilize, examine the products they offer compared to your priorities - for example, if website security is your greatest concern, choose a CDN with a robust set of security tools.User experience: While Content Delivery Networks are a commonly used tool, the user experience can vary based on the CDN. Some CDNs may have limited or complex user interfaces, while others have intuitive dashboards and APIs that can be easily managed using existing workflows. Certain CDNs may also offer fully managed services that take setup and management off of your plate.Price: The cost and pricing model of a CDN is important to factor into your purchasing decision. While some CDNs offer free or low-cost tiers for websites with basic caching and security needs, enterprise-level solutions can cost thousands of dollars a month. Many CDNs charge based on both the tools you utilize and the traffic that runs through the CDN, so make sure to include all of the functions you will be using and estimate how much costs will go up if your traffic increases.Support and documentation: As with other cloud solutions and software tools, the support offered by a CDN provider can range from user-generated forums to email support, to dedicated representatives. When determining what CDN to utilize, consider if you feel comfortable troubleshooting any issues yourself, or if you’d like more frequent access to support representatives. Look at the quality of documentation and level of support provided, along with any added cost for premium support.Compatibility: Certain CDNs may be better suited to different content management systems or software architectures. For example, some CDNs have plugins that are built to easily work with website builders. Before you choose your CDN, examine how it will work with your current application setup and the other tools you use.