Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
CVE-2022-3509: The protobuf-java DoS Vulnerability Explained
CVE-2022-3509 is a denial-of-service flaw in protobuf-java's text-format parser that lets crafted input trigger long garbage-collection pauses. Here is who is affected and how to fix it.
Is jQuery Validate Safe? Security Risks and Fixes for the Validation Plugin
jQuery Validate is convenient, but a real XSS flaw and the habit of grabbing minified copies off random CDNs make it worth a security look. Here is what to check.
Vulnerability Assessment as a Service: What It Is and When You Need It
How vulnerability assessment as a service works, what it covers, and how to tell whether a managed scanning service fits your team better than in-house tooling.
AWS Permission Boundary: How to Cap IAM Privileges Safely
An AWS permission boundary sets the maximum permissions an IAM identity can ever have. Here is how boundaries work, when to use them, and the mistakes that quietly defeat them.
Nuxt Security: Hardening Your Nuxt App Against Real Threats
A practical Nuxt security guide covering the nuxt-security module, Content Security Policy with SSR nonces, server-route risks, and dependency hygiene.
How to Secure the Public Cloud: A Practical Guide
The public cloud can be secured well, and often more securely than a self-run data center. The catch is the shared responsibility model, where most breaches actually originate.
Serverless Offline: What It Is and How to Use It Securely
A guide to the serverless-offline npm plugin: what it emulates, where it diverges from real Lambda, and the security gaps to watch when running functions locally.
The Spring Boot BOM: A Security-First Guide to Version Management
The Spring Boot BOM pins hundreds of transitive versions for you. Used well it closes CVEs fast; used carelessly it hides an end-of-life framework in your build.
Unsecured API Keys: How They Leak and How to Lock Them Down
Unsecured API keys are one of the most common causes of breaches, usually leaking through committed code and misconfigured storage. Here is how they get exposed and how to stop it.
CI/CD Cyber Security: Securing the Pipeline End to End
Your CI/CD pipeline holds the credentials, signs the artifacts, and deploys to production. Here is how to secure it against the attacks that target the build itself.
API Security Software: What It Does and How to Choose It
API security software protects the endpoints that carry most of your traffic and data. Here is what these tools actually do, the categories that matter, and how to choose without duplicating coverage.
AWS Hack: How Attackers Break Into AWS and How to Stop Them
Most AWS breaches don't start with a clever exploit. They start with a leaked key or a misconfigured bucket. Here is how an AWS hack actually unfolds and how to shut down each step.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.