Security
In-depth guides and analysis on security from the Safeguard engineering team.
523 articles
Code Quality Tools That Also Strengthen Your Security
Code quality tools do more than catch style nits; the good ones surface the same weak patterns that turn into vulnerabilities. Here is how quality tooling and security overlap, with a focus on Java.
JavaScript Security Issues: Common Risks and How to Fix Them
The JavaScript security issues that bite most teams are XSS, prototype pollution, vulnerable npm dependencies, and leaked secrets. Here is how each works and how to fix it.
Enso Security and ASPM: What It Is and Why It Matters
Enso Security pioneered Application Security Posture Management before its 2023 acquisition by Snyk. Here is what ASPM solves and how the category has evolved.
org.springframework:spring-web: Known CVEs and How to Stay Patched
A security-focused look at org.springframework:spring-web, including the Spring4Shell RCE, how spring-web relates to spring-webmvc, and how to keep the dependency safe.
Code Search for Security: Finding Vulnerabilities Across Your Codebase
Code search is one of the fastest ways to find security bugs and leaked secrets at scale. Here is how to search effectively, what patterns to hunt for, and where it stops.
Securing Nginx on AWS: The Webinar-Grade Hardening Checklist
Running Nginx on AWS pairs two of the most common infrastructure choices, and this is the hardening walkthrough we would give in a live AWS Nginx webinar.
Choosing a Tool to Detect Security of Code: What Each Type Finds
There is no single tool to detect security of code. Here is what SAST, SCA, secret scanning, DAST, and IaC scanning each catch, and how to combine them without drowning in alerts.
synk.io or snyk.io? Understanding the Snyk Security Platform
People type synk.io when they mean snyk.io, the developer security company. Here is what the real platform does, why the misspelling matters for security, and how to avoid landing on the wrong site.
The Main Types of Security Vulnerabilities, Explained
A practical tour of the main types of security vulnerabilities developers meet, from injection and broken access control to vulnerable dependencies, with defenses for each.
CSP Meaning in Security: What Content Security Policy Actually Does
CSP in security stands for Content Security Policy, a browser mechanism that tells the page which sources of script, style, and other content it may trust. Here is what it means and how to use it.
The POJO Class in Java: A Security Guide to Plain Objects
A POJO class in Java looks harmless — just fields and getters — but the moment it becomes a deserialization target it turns into an attack surface. Here is how plain objects go wrong and how to keep them safe.
CVE-2023-29469: A libxml2 Hashing Flaw That Crashes XML Parsers
CVE-2023-29469 lets a crafted XML document trigger a double free in libxml2 through non-deterministic hashing of empty strings. Affected versions and fixes explained.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.