Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
Password Storage Best Practices Every Developer Should Follow
Storing passwords safely comes down to one rule: never store the password. Here are the password storage best practices that actually hold up against modern attacks.
PHP Code Check: A Security Guide
A PHP code check should catch injection, unsafe deserialization, and vulnerable Composer packages before they ship. Here is a layered approach that fits a normal PHP workflow.
Security in Agile Development: A Practical Guide
Security in agile development works when it moves at sprint speed instead of blocking releases. Here is how to embed AppSec into backlogs, PRs, and pipelines without killing velocity.
What Is a Vulnerability in Cyber Security? A Plain-English Guide
A vulnerability in cyber security is a weakness an attacker can exploit. Here is how vulnerabilities differ from threats and risks, and how teams find and fix them.
MIT-Lizenz: Was sie erlaubt und was kommerzielle Nutzung bedeutet
Die MIT-Lizenz ist eine der freizuegigsten Open-Source-Lizenzen und erlaubt auch die kommerzielle Nutzung. Wir erklaeren Pflichten, Grenzen und Risiken.
The Pen Testing Tools Worth Knowing in 2025
The right pen testing tools depend on what you're assessing. Here's a practical map of the categories, the well-known options in each, and how they fit a defensive program.
ng-bootstrap: Using and Securing Angular's Bootstrap Widgets
ng-bootstrap gives Angular apps native Bootstrap widgets with no jQuery dependency. Here is how to keep it current and where the real security work actually lives.
How to Check Website Vulnerability: A Practical Guide
To check website vulnerability properly you combine automated scanning of the running app with dependency analysis of what it's built from. Here's a workflow that covers both.
Copyleft vs Copyright: What the Difference Means for Your Dependencies
A practical breakdown of copyleft vs copyright, how copyleft licenses like the GPL actually work, and why the distinction shows up in your software bill of materials.
The DevSecOps Process, Explained Stage by Stage
A DevSecOps process bakes security into every step of the software delivery lifecycle instead of bolting it on at the end. Here is what each stage actually looks like.
nginx/1.21.5: Which CVEs Affect It and How to Patch
If your Server header reads nginx/1.21.5, you are running an old mainline release. Here is what it is vulnerable to and the safe versions to move to.
NVD Meaning: What the National Vulnerability Database Actually Does
The NVD is the U.S. government's repository of vulnerability data, built on top of the CVE list and enriched with severity scores and affected-version details. Here is what that means in practice.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.