Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

Simple Feature Flag for Multitenant applications

What are Feature Flags? Feature flags are conditional branches in the code that enable or disable certain features. They act as dynamic switches, allowing developers to activate or deactivate specific functionalities without modifying…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!




What are Feature Flags?



Feature flags are conditional branches in the code that enable or disable certain features. They act as dynamic switches, allowing developers to activate or deactivate specific functionalities without modifying the codebase. This versatility is particularly advantageous in multitenant architectures where different tenants may require distinct features or configurations.



You can read more about why changing behavior over deployment is a wrong approach here Deploys Are the ✨WRONG✨ Way to Change User Experience






How to implement Feature Flags?



You can choose from a very simple implementation to an open source like Unleash, to a complete SaaS solution.



I would say that a SaaS solution to implementing a basic feature flag for most products would be overkill.

Even unleash would be overkill for most Startups.



My advice to most Startups is to start very simple with a feature flag, no need for rollout if you don't have enough users.





Feature Flag for Multitenant apps



At Woovi we implement feature flags per tenant. Each tenant has an array of features that enable the feature for them. Example:




const TenantSchema = new mongoose.Schema({
features: {
type: [String],
},
});






The above code is a mongoose schema that defines that the Tenant collection/table would have a features of type array of strings.



To check on the backend if the tenant has the feature we would use a simple function or condition check:




const hasFeature = (tenant, feature) => 
tenant.features.includes(feature)






A basic FeatureFlag component to use in your React components




export const FeatureFlag = ({
feature,
fallbackComponent = null,
children,
...props,
}: Props) => {
const tenant = useFragment(
graphql`
fragment FeatureFlag_tenant on Tenant {
features
}
`
,
props.tenant,
);

if (!hasFeature(tenant, feature)) {
return fallbackComponent;
}

return children;
};






the usage would be:




<FeatureFlag feature={FEATURE.CASHBACK}>
<Button>Give Cashback</Button>
</FeatureFlag>









Organizing your Features



You can create an enum to organize all your available features




enum FEATURES = {
BETA,
CASHBACK,
PIX,
CREDIT_CARD,
}






If you use a multirepo approach you can copy the features to keep the many repos synced. Otherwise, if you use a monorepo, you can create a package to share this.



You can also expose all available features and features available for the tenant using REST or GraphQL API, with GraphQL the query would be like this one:




query {
features # all available features
tenant {
features # features available for this particular tenant
}
}









In Brief



Sometimes I think we forget that we can build our in-house software solutions instead of delegating to a SaaS or open source.

The approach of this article is working well for Woovi even as we scale. We do have a rollout approach to some features, but we don't need an automated rollout yet.



If you are not using feature flags yet, you are developing software in the wrong way.



If you are using feature flags, what are you using to manage them?






Woovi

Woovi is a Startup that enables shoppers to pay as they like. To make this possible, Woovi provides instant payment solutions for merchants to accept orders.



If you want to work with us, we are hiring!






Photo by Joshua Reddekopp on Unsplash

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Remote Code Execution (RCE) Defense
Syntax validiert (0 Fehler)
title: Detect Exploitation - Simple Feature Flag for Multitenant applications
id: b5822344-6c29-4e7a-8bdf-3b71c192918f
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-26
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-26"
        description = "YARA Signature for "
    strings:
        $str = "Simple Feature Flag for Multit" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("Simple Feature Flag for Multitenant appl")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*Simple Feature Flag for Multitenant appl*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "Simple Feature Flag for Multitenant appl"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich Simple Feature Flag for Multitenant appl.... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Simple Feature Flag for Multitenant applications

Thematisch verwandte Begriffe: Simple, Feature, Flag, Multitenant · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-86066 | Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_atte…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag