AppSec
In-depth guides and analysis on appsec from the Safeguard engineering team.
309 articles
How to Scan Source Code for Vulnerabilities: A Practical Guide
Scanning source code means running automated analysis over your repository to find security flaws before they reach production. Here is how to do it well.
A Practical SAST Tools List for Modern AppSec Teams
A working SAST tools list for teams that want static analysis in the pipeline, not just a scanner that files noise. What each tool is good at and how to choose.
SAST Testing Tools: How to Choose and Use Them Effectively
A practitioner's guide to SAST testing tools: what static analysis actually catches, where it falls short, and how to wire it into a pipeline without drowning developers in noise.
Java Security Scanner: How It Works and What to Use
A Java security scanner combines static analysis of your own code with dependency scanning of your Maven and Gradle tree. Here is how each layer works and how to wire them into a build.
Dependency Vulnerability Scanner: How It Works and What to Use
A dependency vulnerability scanner reads your lockfiles, maps every direct and transitive package to known CVEs, and tells you what to upgrade first. Here is how the good ones work.
API Scanner Tools: How They Work and How to Choose One
An API scanner tool probes your endpoints for authentication gaps, injection flaws, and data exposure before attackers do. Here is how the scanning works and what to look for when picking one.
Use-After-Free Vulnerabilities: How They're Exploited
A use-after-free exploit turns a dangling pointer into arbitrary code execution — here's how the bug class works, why it still dominates browser and kernel CVEs, and how to catch it before release.
Reading a Scan Report: What Actually Matters
Most scan reports bury the three fields that decide whether a finding needs action today — this is how to read one without drowning in noise.
Eclipse Jetty Vulnerabilities: What to Patch and When
Jetty's HTTP/2 handling and older 9.4.x branches have carried real denial-of-service and information-disclosure CVEs — here's what a jetty 9.4.41 exploit actually looks like and which versions close it.
XSS Attack Examples: How Cross-Site Scripting Works and How to Stop It
Walk through realistic XSS attack examples across the three main flavors of cross-site scripting, then see how to detect and remediate each one.
SCA Vulnerabilities: How to Find and Fix Them in Your Dependencies
SCA vulnerabilities are known security flaws in the open-source packages your app pulls in. Here is how to detect them, cut the noise, and fix the ones that matter.
Open Redirect Vulnerabilities: What They Are and How to Fix Them
An open redirect vulnerability fix is usually a ten-line change, but the bug keeps shipping because redirects hide in login flows, tracking links, and OAuth callbacks. Here is how to find and close them.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.