Application Security
In-depth guides and analysis on application security from the Safeguard engineering team.
490 articles
API Security Testing Against the OWASP API Top 10: A Hands-On Guide
APIs are now the primary attack surface for most applications. Here is how to test for the OWASP API Security Top 10 risks systematically.
What is Secure by Design
Secure by Design turns CISA's 2023 guidance and pledge into concrete practice: memory-safe code, no default passwords, and verifiable SBOMs over marketing claims.
What is Secure by Default
Secure by default means software ships in its safest state out of the box. See real breaches, standards, and pledges driving this shift.
TypeScript Security Best Practices
How TypeScript's type system helps catch security bugs at compile time, and what it cannot protect you from.
Progressive Web App Security: The Risks Hiding in the Browser
PWAs blur the line between websites and applications. Their security model is browser-based, which introduces different risks than native applications.
What is Risk-Based Vulnerability Prioritization
CVSS alone can't sort 40,000 CVEs a year. Learn how reachability, EPSS, and KEV data cut real risk from noise.
HTTP/2 Rapid Reset: The Largest DDoS Attacks in Internet History
CVE-2023-44487 exploits a design flaw in HTTP/2 to amplify DDoS attacks, enabling record-breaking attacks peaking at 398 million requests per second.
What is a False Positive in Security Scanning
False positives waste security team hours flagging vulnerabilities that aren't actually exploitable. Here's how to spot, measure, and reduce them.
What is Noise Reduction in AppSec Tooling
Most AppSec scans return thousands of findings, but under 5% are ever reachable in production. Here's how noise reduction actually works.
JSON Parsing Library Vulnerabilities You Should Know About
JSON is the lingua franca of APIs, but the libraries that parse it have had serious security issues. Here is what to watch for in your stack.
RASP vs IAST: Which to Deploy in 2026
A practical comparison of Runtime Application Self-Protection and Interactive Application Security Testing for 2026, with deployment guidance based on real-world tradeoffs.
Spring Boot Security and Dependency Management
Securing Spring Boot applications with dependency management BOMs, vulnerability scanning, and hardened configurations.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.