Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
Dependency Injection in JS: A Practical Security Guide
Dependency injection in JS improves testability, but it also becomes an attack surface when injection is dynamic or unvalidated. Here is how to keep it safe.
Booking a Snyk Demo: What to Test and the Questions to Ask
How to get real value from a Snyk demo — the workflows to insist on, the noise questions to ask, and the pricing details worth pinning down before you commit.
Code Complexity Analysis as a Security Signal, Not Just a Metric
Code complexity analysis measures how tangled your code is, and that number predicts where bugs and vulnerabilities hide. How to measure it and act on it.
JavaScript Checker: How to Scan JavaScript Code for Bugs and Vulnerabilities
A JavaScript checker can mean a linter, a type checker, or a security scanner, and you want all three. Here is what each catches and how to wire them into one pipeline.
DevOps Metrics Tools: What to Track and How to Measure It
DevOps metrics tools collect and visualize the delivery and reliability signals that tell you whether your engineering system is actually improving. Here is what to measure and with what.
YAML Code Security: Deserialization, Injection, and Safe Parsing
YAML code powers config files across the ecosystem, but unsafe parsing can turn a data file into remote code execution. Here is how to write and load it safely.
How to Run an Application Security Code Review That Catches Real Bugs
An application security code review is a targeted read of code for security defects. Here is a practical process that finds real issues without drowning in noise.
The Checkmarx Logo: Where to Find It and How to Use It Correctly
Looking for the Checkmarx logo? Here is where to source an official version, how to use it without violating brand rules, and why logo hygiene matters for security teams.
What Is a Hacking Device? A Defender's Guide
A defender's guide to the hacking device: what these physical tools are, how the common categories work conceptually, and how to defend against them.
SDLC Security Best Practices for Every Phase
SDLC security best practices mapped to each phase of development — from threat modeling in design to dependency scanning in CI and monitoring in production.
Web Application Threats: What They Are and How to Defend Against Them
A practitioner's map of the web application threat landscape — injection, broken access control, supply-chain risk — and the defenses that actually blunt each one.
Antd Injection: Preventing XSS in Ant Design Applications
Antd injection risk is not a flaw in the component library itself but in how you feed it untrusted data. Here is where the danger lives and how to close it.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.