Application Security
In-depth guides and analysis on application security from the Safeguard engineering team.
100 articles
What is cert-manager and how does it handle Kubernetes TLS?
cert-manager issues and renews TLS certificates inside Kubernetes. Learn how issuers work, where private keys end up, and how to audit your setup today.
What is BOLA (OWASP API1) and how do you fix it?
BOLA lets a user read or change another user's data by swapping an object ID in a request. Fix it with an ownership check on every object, plus tests.
What is application acceleration and what does it cost in security?
Application acceleration speeds web delivery with caching, compression, multiplexing and faster handshakes. Each trick has a security trade-off to check.
What is an SMB null session and how do you block it?
An SMB null session is an unauthenticated connection to a Windows host. Block it by restricting anonymous access and enumeration in security policy.
What is an open redirect vulnerability and how do you fix it?
An open redirect sends users to any address a link supplies, which makes phishing look trustworthy. Fix it by allowing known paths or hosts only.
What is an authentication token and how do you protect one?
An authentication token proves who you are after login, so stealing one skips the password. Learn how bearer tokens, JWTs and session IDs differ.
What is an air gap and does it still protect you?
An air gap separates systems with no automated connection, so data crosses only by human action. It cuts exposure but is not absolute. Run one well.
What is a zero-day vulnerability, and how do you prepare for one?
A zero-day is a flaw exploited before a fix exists. You cannot patch it yet, so shrink exposure, limit blast radius and be ready to patch within hours.
What is a VPN gateway and how should you secure one?
A VPN gateway terminates encrypted tunnels at the edge of your network. It sits on the internet, so patching, access limits and logging come first.
What is a software firewall and when is it enough?
A software firewall runs on one computer and controls its inbound and outbound traffic. Learn how it differs from a network firewall and how to set one up.
What Is a Self-Signed Certificate and When Is It Safe to Use?
A self-signed certificate vouches for itself, so nobody else can verify it. It is fine for local tests but risky for public sites. Learn the safer options.
What is a secure web gateway and how does it work?
A secure web gateway filters sites, scans downloads and enforces policy between users and the internet. See how it works, TLS inspection and limits.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.