Ember plays an important role in ensuring that your application is secure from an attack, however engineers share part of the responsibility. Awareness of how you can harness all the power of Ember's security capabilities and and the additional steps you need to take to prevent security exploits is very important and will make life easier in assessing the current state of your application and planning for the future. In this talk we will explore some important security concerns, pitfalls and mitigations that we have learnt over the past four years of building Intercom.