Security
In-depth guides and analysis on security from the Safeguard engineering team.
523 articles
AWS Hack: How Attackers Break Into AWS and How to Stop Them
Most AWS breaches don't start with a clever exploit. They start with a leaked key or a misconfigured bucket. Here is how an AWS hack actually unfolds and how to shut down each step.
Using Checkmarx for Salesforce Apex Security: A Practical Guide
Checkmarx can scan Salesforce Apex and Visualforce for SOQL injection, XSS, and CRUD/FLS gaps. Here is how the pairing works and what to watch for.
What Is PII? A Security and Compliance Guide to Personally Identifiable Information
PII is any data that can identify a specific person. Here is how to classify it, where it leaks in software systems, and what regulators expect you to do about it.
Web Application Security Assessment: How to Actually Test Your App
A web application security assessment is a structured evaluation of an app's exposure across code, dependencies, configuration, and runtime behavior. Here is how to run one that finds real issues.
The Most Common Software Vulnerabilities and How to Prevent Them
The handful of common software vulnerabilities that keep showing up in real breaches, why they persist, and the concrete practices that shut each one down.
What Is a Vulnerability in Cyber Security? A Plain-English Guide
A vulnerability in cyber security is a weakness an attacker can exploit. Here is how vulnerabilities differ from threats and risks, and how teams find and fix them.
Security in Agile Development: A Practical Guide
Security in agile development works when it moves at sprint speed instead of blocking releases. Here is how to embed AppSec into backlogs, PRs, and pipelines without killing velocity.
PHP Code Check: A Security Guide
A PHP code check should catch injection, unsafe deserialization, and vulnerable Composer packages before they ship. Here is a layered approach that fits a normal PHP workflow.
Password Storage Best Practices Every Developer Should Follow
Storing passwords safely comes down to one rule: never store the password. Here are the password storage best practices that actually hold up against modern attacks.
OpenSSF Scorecard Explained: Measuring Open Source Security Health
OpenSSF Scorecard scores a repository against automated security checks and gives you a 0-10 signal for how safe a dependency is to adopt. Here is how it works and how to run it.
Is There an Nginx 1.18.0 Exploit? What the Known CVEs Actually Mean
Nginx 1.18.0 is an unmaintained stable release with real CVEs against it. Here is which flaws are genuinely exploitable, which need specific config, and how to upgrade.
What Is Literal SQL Statement Injection, and How Do You Stop It?
Literal SQL statement injection happens when user input is concatenated straight into a query string. Here is how the attack works and how to shut it down.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.