AppSec
In-depth guides and analysis on appsec from the Safeguard engineering team.
309 articles
How to Provide Security in Android Apps: A Developer Checklist
How to provide security in Android apps: a developer checklist covering network config, storage, component exposure, WebViews, and the dependency layer most mobile teams skip.
IaC Scanning: Catching Cloud Misconfigurations Before Deploy
An IaC scan checks your Terraform, CloudFormation, and Kubernetes files for insecure defaults before they become running infrastructure. Here's how it works and how to wire it into CI.
RASP vs. SAST vs. DAST vs. IAST: How They Differ
SAST vs DAST vs IAST vs RASP comes down to when each technique looks at your application — source code, a running test instance, instrumented runtime tests, or production traffic — and picking the wrong stage leaves real gaps.
Application Security Architecture: Design Patterns That Hold Up
Good application security architecture is a small set of repeatable patterns — trust boundaries, defense in depth, least privilege — applied consistently, not a document nobody reads.
What Are the Benefits of Using SAST Tools During Code Review?
SAST tools turn code review into a consistent security checkpoint by flagging vulnerable patterns automatically, so reviewers can focus on judgment instead of pattern-matching.
What Is a DAST Scan? Dynamic Application Security Testing Explained
A DAST scan tests your running application from the outside, the way an attacker would, finding the vulnerabilities that only appear when code, config, and runtime meet.
SAST Scanners: How They Work and Which One to Use
SAST scanners read your source code to find vulnerabilities without running it. Here is how the main open-source and commercial options compare in practice.
Online Vulnerability Scan: How to Test Your App on the Web
What an online vulnerability scan actually checks, how hosted scanners differ from installed tools, and how to run one without breaking your production site.
Java Vulnerability Scanner: How It Works and What to Use
A Java vulnerability scanner inspects your dependencies, bytecode, and running app for known CVEs and insecure patterns. Here is how each type works.
Synk SAST (Snyk Code): A Practical Guide to Snyk's Static Analysis
Searching for 'Synk SAST' usually means Snyk Code, Snyk's static application security testing tool. Here is what it does, how it works, and where it fits in your pipeline.
Python Pickle: Reading, Writing, and Why It Is a Security Risk
How to pickle an object in Python and read a pickle file back, and the reason the standard library itself warns you never to unpickle data you did not produce.
Security Plugins for CMS and App Platforms: What They Actually Do
A security plugin can harden a CMS meaningfully, but it can't fix a vulnerable core install or a poorly coded theme — it's a layer, not a replacement for patching.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.