AppSec
In-depth guides and analysis on appsec from the Safeguard engineering team.
306 articles
What Is a DAST Solution? Choosing Dynamic Testing for Web Apps
A DAST solution tests your running application from the outside, the way an attacker would. Here is how dynamic testing works, what it catches, and how to pick one that fits your pipeline.
An SCA Tools List That Matches How You Actually Ship
A candid SCA tools list for teams that need dependency and license scanning wired into CI, covering open-source scanners and commercial platforms and how to tell them apart.
Snyk Secret Scanning: How It Detects Hardcoded Secrets
Snyk secret scanning finds hardcoded credentials in your code as part of Snyk Code's SAST engine and, more recently, through the dedicated Snyk Secrets product. Here is what each covers and where the gaps are.
Static Code Scan: How SAST Finds Bugs Before They Ship
A static code scan analyzes source without running it, catching injection, secrets, and unsafe patterns early. Here is what it can and cannot see, and how to wire one into CI.
Understanding DOM XSS Payloads: How They Work and How to Stop Them
DOM XSS payloads execute entirely in the browser when untrusted input reaches a dangerous sink like innerHTML or eval. Here is how the class works and how to shut it down without shipping exploit code.
Checkmarx IAST Explained: What It Does and When to Use It
A practical look at Checkmarx IAST, how interactive testing differs from SAST and DAST, and where it fits in a modern AppSec program.
Open Redirect Vulnerabilities: How Attackers Abuse Them
An open redirect attack abuses a trusted domain's own redirect functionality to send victims to a malicious site — low severity on its own, but a key ingredient in phishing and OAuth token theft.
Buffer Overflow Exploits: A Practical Example
A buffer overflow exploit example, walked through step by step, showing exactly how writing past the end of a fixed-size buffer can turn a simple C function into arbitrary code execution.
XSS Tutorial: How Cross-Site Scripting Works and How to Stop It
A defender's XSS tutorial covering the three attack types, why they still slip through, and the encoding and CSP controls that actually prevent them.
java.lang.NullPointerException: Causes, Fixes, and Prevention
What actually throws java.lang.NullPointerException, how to read the helpful messages modern JVMs print, and the handful of patterns that keep null out of your call paths.
XSS Script Example: How Cross-Site Scripting Works and How to Stop It
A clear XSS script example shows how untrusted input becomes executable code in a victim's browser. Here is the anatomy of the three XSS types and the defenses that actually work.
com.fasterxml.jackson.databind: Maven Coordinates, Modules, and Version Strategy
com.fasterxml.jackson.databind is the Java package, not the Maven groupId, and that mixup breaks builds weekly. Here are the correct coordinates, the module map, and a version strategy that survives audits.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.