Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
jQuery UI Latest Version: Where It Stands and What to Do About It
The jQuery UI latest version is in the 1.14.x line, released in 2024, and the project is now in maintenance mode. Here is what that means for your dependency and its security.
Does a Code Quality Tool Actually Make Your Software More Secure?
A code quality tool and a security scanner overlap more than teams realize. Here is where quality gates catch real vulnerabilities and where you still need dedicated AppSec tooling.
DNS Vulnerabilities: The Attacks That Target the Internet's Address Book
A DNS vulnerability lets an attacker forge, intercept, or redirect the name lookups your systems depend on. Here are the main classes and how to defend against them.
Peter McKay and Snyk: What His Tenure Says About Developer Security
Peter McKay led Snyk through its hypergrowth years as CEO. Here is what his tenure reveals about the developer-first security market and how to evaluate the tools it produced.
Mend Security Explained: What Mend.io Does and How It Works
A clear look at Mend security: what the platform formerly known as WhiteSource covers, how its automated remediation works, and where its strengths and gaps lie.
How to Implement Shift Left Testing Without Slowing Delivery
Shift left testing means moving quality and security checks earlier, into design and coding, instead of leaving them until the end. Here is a practical way to implement it.
LDAP Injection Explained With a Real Example
A walkthrough of a concrete LDAP injection example, why the filter syntax makes it dangerous, and how to detect and remediate it in real code.
Deep Code Analysis: What It Is and How It Finds Bugs Shallow Scans Miss
Deep code analysis reads how data flows through your program instead of matching patterns line by line. Here is what that buys you over grep-style linting.
The Most Common Java Security Flaws and How to Fix Them
A practitioner's tour of the Java security flaws that actually break production systems — deserialization, injection, XXE, and the dependency risks that scanners miss.
How to Run JavaScript Code: Methods and Security Notes
A practical guide to how to run JavaScript code in the browser, with Node.js, and from the command line, plus the security traps that turn a convenient runner into a liability.
CVE-2023-20873: The Spring Boot Cloud Foundry Auth Bypass Explained
A clear breakdown of CVE-2023-20873, the Spring Boot security bypass on Cloud Foundry: affected versions, why wildcard matching caused it, and how to fix it.
Java URLEncode: How to Encode URLs Safely in Java
Java urlencode is usually URLEncoder.encode, but it is built for form bodies, not full URLs. Here is when to use it and when it introduces bugs.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.