Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
What Is a Dependency in Programming?
A dependency is any external code your software relies on to run. Here is what that really means, how direct and transitive dependencies differ, and why the concept sits at the heart of software supply chain security.
Cloud Security and DevOps Automation: Building Guardrails Into the Pipeline
How cloud security and DevOps automation fit together: shifting checks into CI/CD, policy as code, automated IaC and image scanning, and the pitfalls that make automation give false confidence.
What Is a Risk Score in Vulnerability Management?
A risk score turns raw severity into a prioritized number by factoring in exploitability, exposure, and business context. Here is how to read and build one.
PHP Security Issues: The Vulnerabilities That Still Bite in 2025
Most PHP security issues come down to a handful of repeatable mistakes: unsanitized input, weak session handling, and outdated dependencies. Here is what breaks and how to fix it.
CVE-2023-34462: The Netty SniHandler Memory Exhaustion Flaw
CVE-2023-34462 lets a crafted TLS ClientHello force Netty's SniHandler to allocate up to 16MB per connection, opening a denial-of-service path. Here is the root cause, affected versions, and the fix.
Cyber Incident Response: Building a Plan That Actually Works
Cyber incident response is a discipline you rehearse, not a document you file. Here is how the phases fit together and what separates teams that recover fast from ones that flail.
How Much Does Black Duck Cost? A Guide to Black Duck Pricing
Black Duck pricing is quote-only and negotiated per codebase and team size. Here is what drives the cost, the ballpark figures teams report, and how to evaluate whether it fits your budget.
Rego Policy Language: How OPA Turns Rules Into Code
Rego is the declarative policy language behind Open Policy Agent. This guide explains how it works, where it fits in a security pipeline, and how to write policies you can trust.
Snyk Ltd: What the Company Builds and How Its Pricing Works
A factual overview of Snyk Ltd, the developer-security company: what its products do, how its plans are priced, and what to weigh when evaluating it.
How Can You Prevent the Download of Malicious Code?
You prevent the download of malicious code with layered controls: verified sources, dependency scanning, browser and endpoint protection, and least-privilege execution.
How to Verify Java Builds and Artifacts (java verify)
Verifying Java means more than running tests. It covers Maven's verify phase, JAR signature checks, and confirming dependency integrity before you ship.
CVE-2022-2309: The lxml NULL Pointer Dereference DoS Explained
CVE-2022-2309 crashes lxml applications through a NULL pointer dereference in iterwalk. Here is the affected version matrix and how to remediate it.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.