Security
In-depth guides and analysis on security from the Safeguard engineering team.
523 articles
NVD Meaning: What the National Vulnerability Database Actually Does
The NVD is the U.S. government's repository of vulnerability data, built on top of the CVE list and enriched with severity scores and affected-version details. Here is what that means in practice.
CVE-2022-37601: Prototype Pollution in loader-utils Explained
CVE-2022-37601 is a prototype pollution flaw in the webpack loader-utils package. Here is what it affects, how it works, and how to remediate it.
Fix My Java Code: A Practical Guide to Finding and Fixing Security Bugs
"Fix my Java code" usually means a security or dependency problem. Here is a repeatable way to find the real fault, fix it, and stop it from returning.
CVE-2023-36665: The protobuf.js Prototype Pollution Vulnerability Explained
CVE-2023-36665 is a critical prototype pollution flaw in protobuf.js that can lead to remote code execution. Here is how it works and how to fix it fast.
What Gartner Says About DevSecOps: Tools, Trends, and How to Read the Guidance
Gartner's DevSecOps research shapes a lot of security budgets. Here is how to interpret the guidance without buying every category on the map.
JavaScript Exploits Explained: How They Work and How to Stop Them
A practitioner's tour of the JavaScript exploit classes that actually break production apps — prototype pollution, XSS, and malicious dependencies — with detection and fixes.
What Does the DevSecOps Acronym Actually Mean?
The DevSecOps acronym stands for Development, Security, and Operations, describing a practice that folds security into the software delivery pipeline rather than bolting it on at the end.
What a Security Testing Service Does and When You Need One
A security testing service systematically probes your applications and infrastructure for weaknesses before attackers do. Here is what the different types cover and how to choose.
SQLi Cheat Sheet: Detection and Defense Guide
A practical SQLi cheat sheet covering how injection works, the patterns to recognize, and the parameterized-query defenses that actually stop it.
How Do You Pronounce Snyk? The Definitive Answer
Snyk is pronounced sneak, like the verb. Here is where the name comes from, why people get it wrong, and what the tool actually does.
Password Validation: How to Verify Credentials Securely
Password validation is more than a regex for length and symbols. Here is how to check credentials the way modern guidance actually recommends.
Code Quality Software and Security: Where Clean Code and Safe Code Overlap
Code quality software catches more security bugs than most teams give it credit for. Here is how quality tooling and security tooling overlap, where they diverge, and how to combine them.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.