Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
OPA Policy Language: A Practical Guide to Rego
The OPA policy language is Rego, a declarative language for writing authorization and admission-control rules that live outside your application code. Here's how it works and how to keep it secure.
NGINX Ingress TLS: How to Terminate HTTPS Securely on Kubernetes
Configuring NGINX Ingress TLS means wiring up certificates, secrets, and protocol settings so traffic into your cluster is encrypted and hard to downgrade. Here is the secure setup.
PHP Code Analysis: Finding Security Bugs in PHP
How PHP code analysis works, which static and dynamic tools to use, and the PHP-specific vulnerability patterns worth hunting for in your codebase.
MAST Security Testing: How Mobile App Security Testing Works
MAST security testing combines static, dynamic, and interactive analysis to find flaws in mobile apps before attackers do. Here's how each technique fits together.
System.IdentityModel.Tokens.Jwt: A Security Guide for .NET JWT Handling
System.IdentityModel.Tokens.Jwt is the standard .NET library for JSON Web Tokens, but a DoS CVE and a few validation defaults decide whether your token handling is actually safe.
GNU AGPL v3 Explained: What Network Copyleft Means for You
The GNU AGPL v3 closes the SaaS loophole that GPL leaves open. Here's what the network copyleft clause actually requires, and how to spot AGPL dependencies before they create an obligation.
How to Learn Hacking: An Ethical Hacker's Roadmap
A practical, legal path into offensive security — the fundamentals to build first, the labs to practice on, and how to turn curiosity into a defensible skill set.
Snyk the Company: Who They Are, What They Build, and How to Weigh Them
Snyk is a developer-security company founded in 2015, best known for open-source dependency scanning. Here is an honest look at the company, its products, and how to evaluate whether it fits your stack.
Application Security Vulnerabilities: What They Are and How to Fix Them
Application security vulnerabilities are the flaws in your code, dependencies, and configuration that attackers exploit. This guide covers the common classes and how to find and fix them.
CVE-2022-42004: The jackson-databind DoS Explained
CVE-2022-42004 is a denial-of-service flaw in jackson-databind where deeply nested arrays exhaust resources during deserialization. Here is who is affected and how to fix it.
jest-junit: Secure CI Test Reporting for Jest
jest-junit turns Jest test results into JUnit XML that CI systems can read. Here is how to configure it and keep the reporting pipeline free of security surprises.
True Positive in Cyber Security: What It Means and Why It Matters
A true positive is a real alert about a real threat. Understanding it alongside false positives, true negatives, and false negatives is how you judge whether a security tool is any good.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.