Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
Artificial Intelligence Security Tools: What They Do and How to Choose
Artificial intelligence security tools now sit in two camps: tools that use AI to defend software, and tools that defend the AI itself. Knowing which one you need shapes the whole buying decision.
AppSec Program Management: Building One That Sticks
AppSec program management is the discipline of turning scattered security tools into a governed, measurable program with owners, policies, and metrics. Here is how to build one.
CVE Meaning: What a CVE ID Actually Tells You
The CVE meaning is simple: it is a unique public identifier for one specific security vulnerability. Understanding how CVEs are assigned changes how you triage them.
CVE-2023-1370: How a json-smart Recursion Bug Crashes Java Apps
CVE-2023-1370 lets an attacker crash any Java service that parses untrusted JSON with json-smart, using deeply nested arrays to exhaust the stack. Here is the fix.
Snyk REST API: How the Versioned Endpoints Actually Work
The Snyk REST API uses date-based versioning and a Bearer token, which trips up first-time integrators. Here is how it differs from the old v1 API and how to make your first call.
crypto-browserify: Is the npm Crypto Polyfill Still Safe to Use?
crypto-browserify has no known direct vulnerabilities but hasn't shipped a release in over a year. Here is how to decide whether to keep it, and how to stop bundling it when you don't need it.
Security By Default: A Practical Guide
Security by default means the safe path is the default path, and the insecure option takes deliberate effort to reach. Here is how to design systems that protect users before anyone configures anything.
Command Injection Payloads: How They Work and How to Stop Them
Command injection payloads abuse applications that pass user input to a system shell. This defensive guide explains the mechanics, detection, and prevention.
CORS Headers Explained: How to Configure Them Without Opening Holes
CORS headers tell a browser which cross-origin requests to a resource are allowed. Get them right and you enable legitimate clients; get them wrong and you hand attackers a door.
JavaScript Static Analysis: Catching Bugs Before They Ship
JavaScript static analysis reads your code without running it to find bugs, security flaws, and risky patterns early. Here is what it can and cannot catch, and how to set it up well.
Application Fuzzing Explained: Finding Bugs Before Attackers Do
Application fuzzing throws malformed and unexpected input at your code to surface crashes, memory errors, and logic flaws automatically. Here is how it works and how to run it.
GPL Software: A Security and Compliance Guide
GPL software is free to use and modify, but its copyleft terms create real obligations. Here is what engineering teams need to track.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.