Application Security
In-depth guides and analysis on application security from the Safeguard engineering team.
100 articles
What is a proxy firewall and when do you need one?
A proxy firewall sits between two hosts and splits each connection in two so it can inspect content. What it does well, what it costs, and how to decide.
What is a proxy firewall and how does it differ from other firewalls?
A proxy firewall sits between two hosts and never lets them connect directly, inspecting content as it relays. See the benefits, costs and when to use one.
What is a port scan and what does it tell an attacker?
A port scan probes a host to see which ports answer. Learn how TCP replies show open, closed and filtered ports, and how to scan your own systems safely.
What is a perimeter firewall and what can it not protect?
A perimeter firewall filters traffic where your network meets the internet. It blocks unwanted flows in and out but cannot see inside the network.
What is a payload based signature in intrusion detection?
A payload based signature matches known bytes inside network traffic. Learn what it catches, how attackers evade it and how to tune it for fewer alerts.
What is a DNS firewall and does your network need one?
A DNS firewall blocks lookups to known bad domains before a connection starts. See how it works, what it misses and how to roll one out safely.
What is a DKIM record and how do you set one up correctly?
A DKIM record is a DNS TXT entry holding the public key that receivers use to verify your email signatures. Learn selectors, key size and how to test it.
What is a dictionary attack and how do you stop one?
A dictionary attack tries likely passwords from a list instead of every combination. Stop it with blocklists, rate limits, long passwords and MFA.
What is a container firewall and do you need one?
A container firewall limits which containers talk to each other and to the outside. Kubernetes NetworkPolicy covers the basics if your plugin enforces it.
What is a cloud secure web gateway and when do you need one?
A cloud secure web gateway filters and inspects web traffic from a hosted service instead of an office proxy. See what it does, the trade-offs and checks.
What does a VPN protect, and what are its real benefits?
A VPN encrypts traffic to a gateway and can add authentication and access control. It does not stop phishing or secure the device. Know its limits.
What are the top web security threats developers should know?
The OWASP Top 10 groups web risks such as broken access control, injection and misconfiguration. Learn what each means in code and the fix that works.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.