Security
In-depth guides and analysis on security from the Safeguard engineering team.
523 articles
Java URLEncode: How to Encode URLs Safely in Java
Java urlencode is usually URLEncoder.encode, but it is built for form bodies, not full URLs. Here is when to use it and when it introduces bugs.
Java URL Decode: Doing It Safely Without Opening Holes
Java URL decode looks trivial until you hit double-decoding and encoding mismatches. Here is how to decode URLs in Java correctly and where the security bugs hide.
Copyleft Meaning Explained: How Reciprocal Licenses Work
The meaning of copyleft, in plain terms: how reciprocal licenses keep software free, how strong and weak copyleft differ, and why it changes how you use open source dependencies.
CVE-2019-10768: The AngularJS Prototype Pollution Flaw Explained
CVE-2019-10768 is a prototype pollution vulnerability in AngularJS before 1.7.9, where the merge() function can be tricked into modifying Object.prototype. Here is what it does, who it affects, and how to remediate.
Android Application Security Solutions That Reduce Real Risk
Android application security solutions span secure storage, network hardening, code protection, and dependency scanning. Here is what each layer covers and how iOS compares.
Testing and Debugging for Security: A Practical Guide
Testing and debugging are where most security bugs are actually caught or missed. Here is how to fold security into both without slowing your team down.
What a Code Fixer Really Does: A Security Guide
A code fixer promises to find and repair bugs automatically, but for security work the details matter. Here is how to use one without introducing new risk.
XXE Attack Example: How XML External Entity Injection Works and How to Stop It
A defensive XXE attack example that explains how XML External Entity injection abuses parsers, what it can expose, and the parser settings that shut it down.
Snyk Careers: What Working in Developer Security Looks Like
Curious about Snyk careers? Here is an honest look at the company, the kinds of roles it hires for, and the broader developer-security field the openings sit in.
DevSecOps Pipeline Example: A Secure CI/CD Workflow
A concrete DevSecOps pipeline example, stage by stage, showing where SAST, SCA, secret scanning, and DAST fit into a real CI/CD workflow.
DRP Testing: How to Validate a Disaster Recovery Plan
What DRP testing is, the test types from tabletop to full failover, how often to run them, and how to turn recovery drills into evidence auditors accept.
Next.js Security Vulnerability: CVE-2025-29927 Explained
A single spoofed HTTP header could skip your Next.js middleware entirely. Here is what the CVE-2025-29927 authorization bypass is, who it affects, and how to fix it.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.