Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
Public Cloud Protection: Securing Workloads Across AWS, Azure, and GCP
Public cloud protection starts with the shared responsibility model and ends with the boring controls that stop most breaches: identity, configuration, and visibility.
Securing a REST API: A Defense-in-Depth Checklist
Securing a REST API means layering authentication, authorization, input validation, and rate limiting so no single control is the only thing standing between an attacker and your data.
How to Validate a URL in JavaScript Without Opening a Hole
The modern way to validate a URL in JavaScript is the built-in URL constructor, not a regex. Here's how to use it safely on both the client and the server.
What Is Wrong With This Code? A Security Review Checklist
When you ask what is wrong with this code, the answer is often not a crash but a security flaw hiding in plain sight. Here is a practitioner's checklist for spotting the bugs that bite later.
Where Is Snyk Headquarters? Location, Offices, and Company Facts
Snyk headquarters is in Boston, Massachusetts, with a global footprint across North America, Europe, and Israel. Here is the full picture and why it matters for buyers.
CVE-2014-0114: The Apache Commons BeanUtils ClassLoader Flaw Explained
CVE-2014-0114 lets attackers manipulate the ClassLoader through Apache Commons BeanUtils and Struts 1, opening a path to remote code execution. Here is what it affects and how to remediate it.
Log4j 1.2.17: Why It Is Still a Security Problem
Log4j 1.2.17 is the last release of a branch that reached end of life in 2015. It carries multiple RCE and deserialization flaws and cannot be patched. Here is what to do about it.
What the Checkmarx Tool Is Used For: A Practical Guide
The Checkmarx tool is a static application security testing platform that scans source code for vulnerabilities before you ship. Here is what it does, where it fits, and its limits.
DevOps Success Metrics That Actually Predict Delivery Health
The DevOps success metrics worth tracking are the four DORA measures plus a few reliability and security signals. Vanity dashboards measure activity; these measure outcomes.
flask-security-too: What It Is and How to Use It Securely
flask-security-too is the maintained successor to Flask-Security, giving Flask apps authentication, roles, and account features out of the box. Here is what it provides and how to configure it safely.
Updating Ruby on a Mac: A Safe, Security-Minded Guide
The Ruby that ships with macOS is old and there for the system, not you. Here is how to install and update Ruby on a Mac, including Apple Silicon, without breaking anything.
XXE Example in Java: How the Attack Works and How to Stop It
A concrete XXE example in Java showing why default XML parsers are dangerous, what an attacker can read, and the exact parser configuration that shuts it down.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.