Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
Using Checkmarx for Salesforce Apex Security: A Practical Guide
Checkmarx can scan Salesforce Apex and Visualforce for SOQL injection, XSS, and CRUD/FLS gaps. Here is how the pairing works and what to watch for.
What Is PII? A Security and Compliance Guide to Personally Identifiable Information
PII is any data that can identify a specific person. Here is how to classify it, where it leaks in software systems, and what regulators expect you to do about it.
The Most Common Software Vulnerabilities and How to Prevent Them
The handful of common software vulnerabilities that keep showing up in real breaches, why they persist, and the concrete practices that shut each one down.
Web Application Security Assessment: How to Actually Test Your App
A web application security assessment is a structured evaluation of an app's exposure across code, dependencies, configuration, and runtime behavior. Here is how to run one that finds real issues.
What Is Checkmarx One? A Practical Look at the AppSec Platform
Checkmarx One is Checkmarx's cloud application security platform, bundling SAST, SCA, IaC, and more into a single console. Here is what it covers and where it fits.
CVE-2022-45146: Bouncy Castle FIPS Use-After-Free Explained
CVE-2022-45146 is a use-after-free issue in Bouncy Castle's FIPS Java API that surfaces on Java 13 and later. Here is who it affects and how to remediate.
CVE-2022-45688: The Hutool JSON Stack Overflow, Explained
CVE-2022-45688 is a stack-overflow denial-of-service bug in the XML-to-JSON conversion path of hutool-json and org.json. Here is what triggers it and how to fix it.
What Is an IAM Permission Boundary and When to Use One
An IAM permission boundary is a ceiling on what a role or user can ever do, no matter how generous their attached policies are. Here is how to wield it without locking yourself out.
Inversion of Control in JavaScript: The Security Angle Nobody Explains
Inversion of control in JavaScript decouples your code from its dependencies, but handing over instantiation also hands over a piece of your attack surface. Here is how to get the design benefit without the security cost.
What Is Literal SQL Statement Injection, and How Do You Stop It?
Literal SQL statement injection happens when user input is concatenated straight into a query string. Here is how the attack works and how to shut it down.
Is There an Nginx 1.18.0 Exploit? What the Known CVEs Actually Mean
Nginx 1.18.0 is an unmaintained stable release with real CVEs against it. Here is which flaws are genuinely exploitable, which need specific config, and how to upgrade.
OpenSSF Scorecard Explained: Measuring Open Source Security Health
OpenSSF Scorecard scores a repository against automated security checks and gives you a 0-10 signal for how safe a dependency is to adopt. Here is how it works and how to run it.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.