SEO
Who’s Winning Super Competitive SERPs & Why
One of the reasons SEO is such an exciting space is that we’re constantly being challenged to innovate.
But that doesn’t mean you need to reinvent the wheel. That just isn’t scalable – especially not at the enterprise level.
You need to keep proven tactics in your back pocket that you can adapt and modify to inform your own SEO strategy.
And so I was wondering… what useful insights can we learn in studying the keywords that enterprise-level companies are optimizing for?
This is not an exhaustive study; rather, it’s a high-level view of known ranking factors such as links, content, and user experience.
There’s much to be learned from the brands that are winning in search!
In this column, you’ll learn a process for analyzing SERPs and find tips to improve your own SEO based on what we can see others doing well in Google results.
How I Chose The Keywords For This Assessment
Before we jump into the analysis, I want to share how the keywords were chosen.
First, I searched for a list of the top enterprise companies in the U.S.
An enterprise company is a large corporation with a very large marketing budget that manages thousands of employees – think Fortune 500 companies.
I picked out 21 sites I thought would return general keywords and avoided brand-specific keywords like “iPhone.”
Then, I used Ahrefs to see what organic keywords the sites were ranking for with a keyword difficulty score of 90 and above.
I sorted the list by traffic to the site because this tells me that the web page is most likely relevant to the user’s search query. Otherwise, they wouldn’t have clicked through.
At this point, I had a list of 44 possible keywords to study.
Next, I did a quick Google search to see if there was a variety of websites on the result’s page or if one type of website dominated.
This knocked out some contenders such as “weather,” for example, because it’s a given that the weather channel, national weather service, and new stations will rank.
Finally, I settled on three enterprise-level keywords that cover a broad range of business types:
- Retail (coffee).
- Service industry (life insurance).
- Fintech (NFT).
[Coffee] SERP Insights
The search engine result page (SERP) for the keyword “coffee” interested me because it’s so clean!
The SERP covers just about every possible search intent for the query, “coffee.”
And a few oddities caught my eye that may provide us further insight into how Google’s algorithm works.
This section will cover what makes “coffee” an enterprise SEO keyword with quick stats, jump into a review of what the SERP tells us, and lastly analyze the link profile and content to see what we can learn.
Coffee Keyword Stats
- Avg. Monthly Volume: 6.6 million in the United States.
- Difficulty Rating: 96.
- Average CPC: $1.80.
-
Screenshot from Ahrefs, May 2022
SERP Review
When you search “coffee,” you may see a carousel of shopping ads and a map of your local coffee shops.
You can read a knowledge panel with information from Wikipedia and nutrition facts sourced from the USDA on the right-hand side.
-
Screenshot from search for [coffee], Google, May 2022
Followed by suggested searches for Starbucks coffee drinks, songs about coffee, and other items people often search for: tea, espresso, drink, etc.
We have Wikipedia, Peet’s Coffee, Coffee Bean & Tea Leaf, Starbucks, National Coffee Organization, and a healthline.com article in the traditional organic results.
-
Screenshot from Google search, May 2022
Hmmm, I wonder why Peet’s coffee ($7.9 billion in total sales) is beating Starbucks ($24.6 billion in net revenue).
And how did the healthline.com article squeak in there?
Let’s find out!
Links Review
Peet’s Coffee has 6,900 referring domains linking to the ranking page, while Starbucks has 4,900 referring domains linking to the home page.
-
Screenshot from Ahrefs, May 2022
Peet’s Coffee has approximately 1,500 internal backlinks pointing to the ranking page.
440 of the 1,500 internal backlinks have the anchor or surrounding text, including “coffee.”
-
Screenshot from Ahrefs, May 2022
Starbucks has 13,400 internal backlinks to the ranking page; 9,600+ backlinks include “coffee” in the anchor or surrounding text.
-
Screenshot from Ahrefs, May 2022
Content Review
Peet’s home page has “coffee” in the page title and as the first menu navigation item.
Subheaders cover the topic of coffee, from roasting to the history of coffee.
The word “coffee” is counted a total of 42 times on the home page, out of a total of 1283 words.
-
Screenshot from Peet’s Coffee home page, May 2022
Starbucks, on the other hand, appears to use its website as an extension of its retail locations.
The home page really feels like an app to order coffee or a corporate communication board – like the digital version of a break room corkboard.
Coffee is in the page title as part of the brand’s name, but it is not the primary word on the home page.
Out of a total of 515 words, coffee is counted only 12 times.


Technical SEO/UX Review
I did not run a full technical audit for this analysis, so additional factors could be at play here.
I used a schema validator and Page Speed Insights tool to quickly assess what schema is on page and the specific web page’s core web vitals.
Peet’s Coffee uses organization, webSite, Product, and Store schema, and it failed the core web vitals assessment.
Primarily in first contentful paint (FCP) and largest contentful paint (LCP).
The first input delay (FID) and cumulative layout shift (CLS) look good.


Starbucks.com home page passes core web vitals in all four areas: FCP, LCP, FID, and CLS however, I did not detect any schema markup.


It was interesting to see position history between May 2020 and April 2021. Starbucks seems to have fallen out of the top 100 for an entire year.
Did Starbucks get hit with a penalty?
-
Screenshot from Ahrefs, May 2022
Breaking Into A Highly Competitive SERP
We have to talk about what Healthline did because it’s such a great example.
Healthline published an article, “9 Unique Benefits of Coffee,” on January 11, 2022, and began ranking in position 3 for the query “coffee” by March 04, 2022.
-
Screenshot from Ahrefs, May 2022
Wondering how Healthline found the wedge in?
They noticed the missing piece from the SERP.
The SERP covered shopping, local shops, definition, nutrition facts, songs, recipes, and videos but not why people would be interested in drinking coffee – the benefits.
The people also ask (PAA) questions provided a solid hint with questions like: “What are the benefits of coffee?” and “Is coffee good for your health?”
If you search for “coffee benefits” or “benefits of coffee”, the Healthline article leads as an unorganized list featured snippet.
-
Screenshot from Google Search, May 2022
Outranking arguably more trusted websites like hopkinsmedicine.org, rush.edu, and harvard.edu.
YMYL sites should pay special attention to Healthline page structure and author profiles.
In the screenshot below, take note of how each sentence uses a “fact-checked” source, followed by a summary explaining it to readers in simple terms.
-
Screenshot from Healthline web page, May 2022
This is really well-written content.
One more thing – did you notice anything odd about when the Healthline article ranked?
Nearly two months passed between when the Healthline article was published and when the article ranked.
What gives?
Healthline went hard adding internal links to the “benefits of coffee” page in March 2022 (First seen March 2, 2022) – and pop – the article ranks!
“9 Unique Benefits of Coffee” currently has 266 internal backlinks; 247 include the term “coffee” in the anchor or surrounding text.
-
Screenshot from Ahrefs, May 2022
Coffee: What We Can Learn
By analyzing the entire SERP, we can see that Google is looking to cover every possible search intent for the very basic query of “coffee.”
While Peet’s Coffee, Coffeebean.com, and Starbucks seem to dance for the top company ranking for the query – healthline.com found an opportunity by focusing on what the SERP did not contain.
However, it seems like the Healthline article did not really gain footing until the site added internal backlinks to the article using the desired search query of “coffee.”
[Life Insurance] SERP Insights
Life insurance is an interesting SERP to study because it showcases the battle of big national brands with a seemingly unlimited marketing budget (if you look at CPC numbers) for what is a relatively lower search volume.
Analyzing “life insurance” is sure to turn out some gems.
Life Insurance Keyword Stats
- Average monthly search volume: 202k in the United States.
- Difficulty rating: 90.
- Average CPC: $30.
-
Screenshot from Ahrefs, May 2022
- SERP Review
When you google “life insurance” the recommended search terms are:
- Companies: Google understands who we are trying to reach.
- Quotes and policy: Google understands what we want from the company.
- For seniors: Google understands the primary target audience for life insurance.
-
Screenshot from search for [life insurance], Google, May 2022
Let’s click through to see Google’s search results for our enterprise SEO keyword, “life insurance.”
There are paid ads at the top, followed by a sentence-structured featured snippet for Geico.com/life-insurance that defines what life insurance means and how it works.
-
Screenshot from Google Search, May 2022
People Also Ask common questions are:
- What are the three main types of life insurance?
- What is life insurance and how does it work?
- What is the average life insurance cost per month?
- What is life insurance used for?
Knowing the recommended search terms and reading the PAA questions, we can conclude that people who search for [life insurance] want to know what life insurance is for and how much it costs.
Let’s see what we can learn from Geico’s featured snippet compared to competitors.
Links Review
Geico has 367 referring domains to the ranking page.
And has 155 of the 1,200 internal backlinks pointing to the ranking page, including “life insurance” in the anchor or surrounding text.
-
Screenshot from Ahrefs, May 2022
Investopedia is a contender for the top-ranking site and has significantly more referring domains than Geico or Liberty Mutual.
Significantly more, 1,100 referring domains versus Geico’s 367 and Liberty Mutual’s 300.
-
Screenshot from Ahrefs, May 2022
Of Investopedia’s 726 internal backlinks, 711 are going to the ranking page, including the term “life insurance” in the anchor or surrounding text.
-
Screenshot from Ahrefs, May 2022
Content Review
Geico’s home page H1 reads, “Life Insurance Quotes,” followed immediately by an H2 that reads, “See how affordable a life insurance policy can be.”
The first paragraph of the Geico web page addresses the primary question, “What is life insurance?” as an H2.
The paragraph leads off with “Life insurance is…,” and these first two sentences are pulled into the featured snippet for the life insurance search query.
-
Screenshot from Geico website, May 2022
The term life insurance is used 49 times on the page with a total word count of 1922, which pales in comparison to Investopedia’s 5504 words!
Investopedia’s Page title is SEO perfection.
Note how it includes the keyword and its three support terms, life insurance, policies, and companies.
-
Screenshot from Investopedia page source, May 2022
The page content starts with no introduction, just jumping right into an H1 “What is Life Insurance?
We find a definition for life insurance (just like Geico), “Life insurance is a contract between an insurer and a policy owner….”
-
Screenshot from Investopedia web page, May 2022
To highlight the pattern for this SERP a little bit more, I’m also showing you the fourth-ranking web page Liberty Mutual.
Just like Geico, Liberty Mutual stacks an H1 “Life Insurance” on top of an H2 “Ensure financial security for your family.”
Followed by a CTA box for starting a quote.
Scroll a bit further down the page and you will see an H2 for “What is a life insurance policy?”
Note that the header includes the additional word “policy.”
This approach didn’t pay off as Geico took the featured snippet for the search query, [What is a life insurance policy?] as well.
-
Screenshot from Liberty Mutual web page, May 2022
The trouble for Liberty Mutual is that the text following the H2 is not a definition.
It is sales language, explaining what the user gets when purchasing a life insurance policy.
Technical SEO/UX Review
Geico uses FAQ schema page markup for the accordion questions and answers at the bottom of the page.
This does not give the webpage a boost as it is not ranking on the first page for those queries.
Running the page path through Google’s page speed insights tool and Geico fails the core web vitals assessment.
Doing significantly poorly in the areas of first contentful paint (FCP) and largest contentful paint (LCP).


Investopedia (position 2) uses article schema and passed core web vitals with all four areas in the green.
-
Screenshot from Web Core Vitals Report, May 2022
Liberty Mutual Insurance (position 4) uses breadcrumb and financial product schema. It passed the mobile core web vitals assessment by Google, with all four areas in the green.
-
Screenshot from Web Core Vitals Report, May 2022
Life Insurance: What We Can Learn
By analyzing the featured snippet, we can see that the result Google is looking for is a definition.
The top-ranking pages all have the first H2 as “What is life insurance…” and the following subsequent text “Life insurance is (insert definition here.).”
Now, why is Geico outranking Investopedia when Investopedia is faster, and the quality of content is significantly better?
Well, step back and consider the singular web page in the context of Google’s full understanding of the website.
The Geico website is a company that sells insurance.
The Investopedia website educates consumers on all things related to finance.
Remember the common theme among related search queries and the PAA?
It gives us an additional hint about who people want to hear from when they search “life insurance.”
Google has determined that people want to know what life insurance is AND how much it costs.
Google has also determined that the closest recommended search query is “life insurance companies,” meaning that people are searching for:
- What life insurance is?
- How much does it cost?
- And for a company to purchase life insurance from.
It makes sense that Google would place a website that sells insurance above a website that provides information.
It would be interesting to see what happens if Investopedia places a form for life insurance quotes on its web page.
Or, if Liberty Mutual updated their definition for what life insurance is.
[NFT] SERP Insights
Crypto and NFT were two terms that had made it into the initial top 40 enterprise SEO keywords.
Given the virility of the queries, I had to include at least one in this review.
NFT had greater search volume, a higher difficulty rating, and a more interesting SERP.
Crypto.com was winning for “crypto.” Not much fun.
NFT Keyword Stats
- Average monthly search volume: 1.6M in the United States
- Difficulty rating: 96
- Average CPC: $1.10
-
Screenshot from Ahrefs, May 2022
SERP Review
Google the acronym for a non-fungible token (NFT) and you’ll likely see something different depending on the day.
It’s a really volatile search with frequent position changes.
At the time of this analysis, there was a sentence-structure featured snippet by Reuters defining what NFTs are at the top of the SERP.
Note: The featured snippet changed hands three times as I wrote this article, and last I checked, it looks like the Wall Street Journal has since snagged the featured snippet.
Followed by a knowledge panel with information pulled from Wikipedia and “People also ask” questions:
- What is NFT and how does it work?
- What is NFT crypto?
- What does NFT stand for in NFT?
- What does it mean to own NFT?
-
Screenshot from Google Search, May 2022
We can see that Google also (currently) thinks that users searching for [nft] are looking for a definition.
After the PAA, there are informational articles from news sites The Verge and Forbes.
The first company you will find is a marketplace, OpenSea.io.
The article by Forbes is of specific interest here because Forbes began ranking for the term “NFT” on April 9, 2022, after an update to the page made on April 8, 2022.
The kicker is the original article published on April 29, 2021.
Almost an entire year earlier.
So, what switch did Forbes flip?
-
Screenshot from Forbes source code, May 2022
Links Review
Forbes has 2.31k referring domains and 16 internal backlinks pointing to the article, 14 including the term “nft” in the anchor or surrounding text.
All backlinks (from referring domains or internal pages) were added on or after April 8, 2022.
-
Screenshot from Ahrefs, May 2022
Content Review
I used the web page’s core web vitals to play “find the difference” and see if I could spot any of the edits to the content made on April 8th.
I didn’t see anything.
The page title, headers, and general page structure appear exactly the same.
And, it does not appear as though any edits were made to the Forbes article before April 2022.
-
Screenshot from Wayback Machine, May 2022
Tech SEO/UX Review
Forbes includes NewsArticle schema and failed core web vitals assessment by Google’s page speed insights tool.
It’s honestly really close to passing though, having passed FCP, LCP, and FID. Only failing cumulative layout shift (CLS).


What We Can Learn
In the case of Forbes’ article on NFTs, it appears that the article sat stale for nearly a year before getting the link love it needed to rank.
Don’t forget to link to your content! Google has confirmed that internal links are a ranking factor.
Final Thoughts
Google’s algorithm is constantly changing (thousands of times a year), so there’s no magic SEO formula or tool that can rank – and maintain the rank – of high-performance keywords.
By studying enterprise SEO wins, we can gather insights into how to best optimize our web pages:
- Analyze what Google has determined to be the user intent.
- Look for content opportunities left on the table.
- Use internal backlinks to tip the proverbial search result scales in your favor.
More resources:
Featured Image: G Stock Studio/Shutterstock
!function(f,b,e,v,n,t,s)
{if(f.fbq)return;n=f.fbq=function(){n.callMethod?
n.callMethod.apply(n,arguments):n.queue.push(arguments)};
if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version=’2.0′;
n.queue=[];t=b.createElement(e);t.async=!0;
t.src=v;s=b.getElementsByTagName(e)[0];
s.parentNode.insertBefore(t,s)}(window,document,’script’,
‘https://connect.facebook.net/en_US/fbevents.js’);
if( typeof sopp !== “undefined” && sopp === ‘yes’ ){
fbq(‘dataProcessingOptions’, [‘LDU’], 1, 1000);
}else{
fbq(‘dataProcessingOptions’, []);
}
fbq(‘init’, ‘1321385257908563’);
fbq(‘track’, ‘PageView’);
fbq(‘trackSingle’, ‘1321385257908563’, ‘ViewContent’, {
content_name: ‘enterprise-seo-whos-winning’,
content_category: ‘enterprise seo-strategy ‘
});
SEO
Google Updating Cryptocurrency Advertising Policy For 2024

Google published an announcement of upcoming changes to their cryptocurrency advertising policies and advises advertisers to make themselves aware of the changes and prepare to be in compliance with the new requirements.
The upcoming updates are to Google’s Cryptocurrencies and related products policy for the advertisement of Cryptocurrency Coin Trusts. The changes are set to take effect on January 29th, 2024.
Cryptocurrency Coin Trusts are financial products that enable investors to trade shares in trusts holding substantial amounts of digital currency. These trusts provide investors with equity in cryptocurrencies without having direct ownership. They are also an option for creating a more diversified portfolio.
The policy updates by Google that are coming in 2024 aim to describe the scope and requirements for the advertisement of Cryptocurrency Coin Trusts. Advertisers targeting the United States will be able to promote these products and services as long as they abide by specific policies outlined in the updated requirements and that they also obtain certification from Google.
The updated policy changes are not limited to the United States. They will apply globally to all accounts advertising Cryptocurrency Coin Trusts.
Google’s announcement also reminded advertisers of their obligation for compliance to local laws in the areas where the ads are targeted.
Google’s approach for violations of the new policy will be to first give a warning before imposing an account suspension.
Advertisers that fail to comply with the updated policy will receive a warning at least seven days before a potential account suspension. This time period provides advertisers with an opportunity to fix non-compliance issues and to get back into compliance with the revised guidelines.
Advertisers are encouraged to refer to Google’s documentation on “About restricted financial products certification.”
The deadline for the change in policy is January 29th, 2024. Cryptocurrency Coin Trusts advertisers will need to pay close attention to the updated policies in order to ensure compliance.
Read Google’s announcement:
Updates to Cryptocurrencies and related products policy (December 2023)
SEO
SEO Trends You Can’t Ignore In 2024

Most SEO trends fade quickly. But some of them stick and deserve your attention.
Let’s explore what those are and how to take advantage of them.
If you give ChatGPT a title and ask it to write a blog post, it will—in seconds.
This is super impressive, but there are a couple of issues:
- Everyone else using ChatGPT is creating the same content. It’s the same for users of other GPT-powered AI writing tools, too—which is basically all of them.
- The content is extremely dull. Sure, you can ask ChatGPT to “make it more entertaining,” but it usually overcompensates and hands back a cringe version of the same boring content.
In the words of Gael Breton:
How to take advantage of this SEO trend
Don’t use AI to write entire articles. They’ll be boring as heck. Instead, use it as a creative sparring partner to help you write better content and automate monotonous tasks.
For example, you can ask ChatGPT To write an outline from a working title and a list of keywords (which you can pull from Ahrefs)—and it does a pretty decent job.
Prompt:
Create an outline for a post entitled “[working title]” based on these keywords: [list]
Result:


When you’ve written your draft, you can ask to polish it in seconds by asking ChatGPT to proofread it.


Then you can automate the boring stuff, like creating more enticing title tags…


… and writing a meta description:


If you notice a few months down the line that your content ranks well but hasn’t won the featured snippet, ChatGPT can help with that, too.
For example, Ahrefs tells us we rank in position 3 for “affiliate marketing” but don’t own the snippet.


If we check Google, the snippet is a definition. Asking ChatGPT to simplify our definition may solve this problem.


In short, there are a near-infinite number of ways to use ChatGPT (and other AI writing tools) to create better content. And all of them buck the trend of asking it to write boring, boilerplate articles from scratch.
Programmatic SEO refers to the creation of keyword-targeted pages in an automatic (or near automatic) way.
Nomadlist’s location pages are a perfect example:


Each page focuses on a specific city and shares the same core information—internet speeds, cost, temperature, etc. All of this information is pulled programmatically from a database and the site gets an estimated 46k monthly search visits in total.


Programmatic SEO is nothing new. It’s been around forever. It’s just the hot thing right now because AI tools like ChatGPT make it easier and more accessible than ever before.
The problem? As John Mueller pointed out on Twitter X, much of it is spam:
I love fire, but also programmatic SEO is often a fancy banner for spam.
— I am John – ⭐ Say no to cookies – biscuits only ⭐ (@JohnMu) July 25, 2023
How to take advantage of this SEO trend
Don’t use programmatic SEO to publish insane amounts of spam that’ll probably get hit in the next Google update. Use it to scale valuable content that will stand the test of time.
For example, Wise’s currency conversion pages currently get an estimated 31.7M monthly search visits:


This is because the content is actually useful. Each page features an interactive tool showing the live exchange rate for any amount…


… the exchange rate over time…


… a handy email notification option when the exchange rates exceed a certain amount…


… handy conversion charts for popular amounts…


… and a comparison of the cheapest ways to send money abroad in your chosen currency:


It doesn’t matter that all of these pages use the same template. The data is exactly what you want to see when you search [currency 1] to [currency 2]
.
That’s probably why Wise ranks in the top 10 for over 66,000 of these keywords:


Looking to take advantage of programmatic content in 2024 like Wise? Check out the guide below.
People love ChatGPT because it answers questions fast and succinctly, so it’s no surprise that generative AI is already making its way into search.
For example, if you ask Bing for a definition or how to do something basic, AI will generate an answer on the fly right there in the search results.




In other words, thanks to AI, users no longer have to click on a search result for answers to simple questions. It’s like featured snippets on steroids.
This might not be a huge deal right now, but when Google’s version of this (Search Generative Experience) comes out of beta, many websites will see clicks fall off a cliff.
How to take advantage of this SEO trend
Don’t invest too much in topics that generative AI can easily answer. You’ll only lose clicks like crazy to AI in the long run. Instead, start prioritizing topics that AI will struggle to answer.
How do you know which topics it will struggle to answer? Try asking ChatGPT. If it gives a good and concise answer, it’s clearly an easy question.
For example, there are hundreds of searches for how to calculate a percentage in Google Sheets every month in the US:


If you ask ChatGPT for the solution, it gives you a perfect answer in about fifty words.


This is the perfect example of a topic where generative AI will remove the need to click on a search result for many.
That’s probably not going to be the case for a topic like this:


Sure. Generative AI might be able to tell you how to create a template—but it can’t make one for you. And even if it can in the future, it will never be a personal finance expert with experience. You’ll always have to click on a search result for a template created by that person.
These are the kinds of topics to prioritize in 2024 and beyond.
Sidenote.
None of this means you should stop targeting “simple” topics altogether. You’ll always be able to get some traffic from them. My point is not to be obsessed with ranking for keywords whose days are numbered. Prioritize topics with long-term value instead.
Bonus: 3 SEO trends to ignore in 2024
Not all SEO trends move the needle. Here are just a few of those trends and why you should ignore them.
People are using voice search more than ever
In 2014, Google revealed that 41% of Americans use voice search daily. According to research by UpCity, that number was up to 50% as of 2022. I haven’t seen any data for 2023 yet, but I’d imagine it’s above 50%.
Why you should ignore this SEO trend
75% of voice search results come from a page ranking in the top 3, and 40.7% come from a featured snippet. If you’re already optimizing for those things, there’s not much more you can do.
People are using visual search for shopping more than ever
In 2022, Insider Intelligence reported that 22% of US adults have shopped with visual search (Google Lens, Bing Visual Search, etc.). That number is up from just 15% in 2021.
Why you should ignore this SEO trend
Much like voice search, there’s no real way to optimize for visual search. Sure, it helps to have good quality product images, optimized filenames and alt text, and product schema markup on your pages—but you should be doing this stuff anyway as it’s been a best practice since forever.
People are using Bing more than ever before
Bing’s Yusuf Mehdi announced in March 2023 that the search engine had surpassed 100M daily active users for the first time ever. This came just one month after the launch of AI-powered Bing.
Why you should ignore this SEO trend
Bing might be more popular than ever, but its market share still only stands at around ~3% according to estimates by Statcounter. Google’s market share stands at roughly 92%, so that’s the one you should be optimizing for.
Plus, it’s often the case that if you rank in Google, you also rank in Bing—so it really doesn’t deserve any focus.
Final thoughts
Keeping your finger on the pulse and taking advantage of trends makes sense, but don’t let them distract you from the boring stuff that’s always worked: find what people are searching for > create content about it > build backlinks > repeat.
Got questions? Ping me on Twitter X.
SEO
Mozilla VPN Security Risks Discovered

Mozilla published the results of a recent third-party security audit of its VPN services as part of it’s commitment to user privacy and security. The survey revealed security issues which were presented to Mozilla to be addressed with fixes to ensure user privacy and security.
Many search marketers use VPNs during the course of their business especially when using a Wi-Fi connection in order to protect sensitive data, so the trustworthiness of a VNP is essential.
Mozilla VPN
A Virtual Private Network (VPN), is a service that hides (encrypts) a user’s Internet traffic so that no third party (like an ISP) can snoop and see what sites a user is visiting.
VPNs also add a layer of security from malicious activities such as session hijacking which can give an attacker full access to the websites a user is visiting.
There is a high expectation from users that the VPN will protect their privacy when they are browsing on the Internet.
Mozilla thus employs the services of a third party to conduct a security audit to make sure their VPN is thoroughly locked down.
Security Risks Discovered
The audit revealed vulnerabilities of medium or higher severity, ranging from Denial of Service (DoS). risks to keychain access leaks (related to encryption) and the lack of access controls.
Cure53, the third party security firm, discovered and addressed several risks. Among the issues were potential VPN leaks to the vulnerability of a rogue extension that disabled the VPN.
The scope of the audit encompassed the following products:
- Mozilla VPN Qt6 App for macOS
- Mozilla VPN Qt6 App for Linux
- Mozilla VPN Qt6 App for Windows
- Mozilla VPN Qt6 App for iOS
- Mozilla VPN Qt6 App for Androi
These are the risks identified by the security audit:
- FVP-03-003: DoS via serialized intent
- FVP-03-008: Keychain access level leaks WG private key to iCloud
- VP-03-010: VPN leak via captive portal detection
- FVP-03-011: Lack of local TCP server access controls
- FVP-03-012: Rogue extension can disable VPN using mozillavpnnp (High)
The rogue extension issue was rated as high severity. Each risk was subsequently addressed by Mozilla.
Mozilla presented the results of the security audit as part of their commitment to transparency and to maintain the trust and security of their users. Conducting a third party security audit is a best practice for a VPN provider that helps assure that the VPN is trustworthy and reliable.
Read Mozilla’s announcement:
Mozilla VPN Security Audit 2023
Featured Image by Shutterstock/Meilun
-
SEO6 days ago
GPT Store Set To Launch In 2024 After ‘Unexpected’ Delays
-
SEARCHENGINES6 days ago
Google Core Update Done Followed By Intense Search Volatility, New Structured Data, Google Ads Head Steps Down & 20 Years Covering Search
-
PPC6 days ago
How to Get Clients for Your Agency (That You’ll Love Working With)
-
TECHNOLOGY7 days ago
Next-gen chips, Amazon Q, and speedy S3
-
WORDPRESS1 day ago
8 Best Zapier Alternatives to Automate Your Website
-
MARKETING6 days ago
The Complete Guide to Becoming an Authentic Thought Leader
-
SEARCHENGINES5 days ago
Google Discover Showing Older Content Since Follow Feature Arrived
-
SEO6 days ago
96.55% of Content Gets No Traffic From Google. Here’s How to Be in the Other 3.45% [New Research for 2023]
You must be logged in to post a comment Login