Security
In-depth guides and analysis on security from the Safeguard engineering team.
523 articles
Secure Code Analysis: How to Find Bugs Before They Ship
Secure code analysis combines static, dependency, and dynamic techniques. Here is what each one finds, where they overlap, and how to build an analysis pipeline developers won't route around.
Define Agentic: What 'Agentic' Really Means for Security
To define agentic: it describes AI systems that plan and take actions toward a goal with limited human oversight. Here is what that autonomy means for security teams.
WWW XXE: Understanding and Preventing XML External Entity Attacks
XXE lets a crafted XML document read files, reach internal services, and exhaust resources. Here is how the attack works and how to shut it down.
Hacking Websites: How Attacks Work and How to Defend Against Them
A defender's overview of how websites get compromised, the common attack classes behind real breaches, and the controls that stop them before they start.
Snyk Test CLI: How to Scan Projects from the Command Line
The snyk test CLI command scans your project's dependencies for known vulnerabilities right from the terminal. Here is how to run it, gate on severity, and wire it into CI without slowing everyone down.
PyPI Malware Today: How Attacks Reach Your Builds Now
PyPI malware today mostly arrives through typosquatting, dependency confusion, and malicious install scripts. Here is how the current attack patterns work and how to defend your pipeline.
nginx 1.18.0 CVEs: Which Vulnerabilities Affect You and How to Patch
A look at the CVEs that affect nginx 1.18.0, why running an end-of-life stable branch is the real risk, and the safest path off it.
Checkmarx Supported Languages: What CxSAST Can Actually Scan
Checkmarx supports 35+ programming languages and 80+ frameworks for static analysis. Here is how its language coverage works and what to check before buying.
How to Read and Fix a Checkmarx Vulnerability Finding
A Checkmarx vulnerability is a SAST finding that traces tainted data from source to sink. Here is how to interpret one, confirm it is real, and remediate it.
Password Salt and Hash: How to Store Passwords Safely
Storing a password means hashing it with a slow algorithm and a unique salt, never encrypting it or saving it in plaintext. Here's how salting and hashing actually protect users.
What Is a Possible Effect of Malicious Code?
Malicious code can steal data, encrypt files for ransom, hand attackers remote control, drain resources, and spread across a network. Here is the full range of effects and how to limit them.
URLEncoder in Java: Correct Usage and Its Security Pitfalls
URLEncoder in Java is easy to misuse. Here is when it applies, why it is not URL encoding for whole URLs, and the injection risks of getting it wrong.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.