What you'll learn:

• What security settings are available in your app
• When to use each one
• Where to go for step-by-step setup instructions

Available Security Settings

Granting Knack Support Access to Your Live App

Control whether the Knack support team can access your Live App directly, so they can help troubleshoot issues more effectively.

Note: For more detail on what support access covers and how the Knack team uses it, see Learn About Working with Support.

Script Attack Protection

Prevents malicious code from being stored and executed in your app by checking custom code elements against an allowlist. Keep this enabled unless you have a specific reason not to.

Use this to: protect against script injection attacks in form submissions, rich text fields, and other free-form input.

→ Script Attack Protection

IP Restrictions

Limits access to your app to a specific list of approved IP addresses, so only trusted networks can reach it. Available on Pro and higher-tier plans.

Use this to: lock down an internal tool, or add a network-level layer of protection for a remote team connecting through a known IP or VPN.

→ Restricting App Access by IP Address

Restrict API Responses

Limits your API responses to only the fields that have been added to a view, instead of returning every field on a record.

Use this to: reduce payload size and prevent fields you never intended to expose from appearing in API responses.

→ Restricting API Response Data

Which Setting Do I Need?

• Worried about malicious input in forms or rich text fields? → Script Attack Protection
• Need to restrict who can even reach your app? → IP Restrictions
• Concerned about what data your API exposes to outside tools? → Restrict API Responses

Tip: These settings aren't mutually exclusive — most apps handling sensitive data benefit from using all three together.

Overall, Knack provides a range of security features to help protect your app and data. The key is understanding how these settings work and configuring them appropriately for your app's needs.