Security
In-depth guides and analysis on security from the Safeguard engineering team.
523 articles
The Semgrep Logo and What Semgrep Actually Does
Looking for the Semgrep logo often means you are evaluating Semgrep the tool. Here is what the brand mark represents and how the static analysis engine works.
Code Error Finder Tools: Catching Security Bugs Early
A code error finder is any tool that surfaces bugs before they ship — and the ones that matter most for security catch the errors that turn into vulnerabilities.
Server Vulnerability Assessment: A Step-by-Step Guide
A server vulnerability assessment finds the missing patches, weak configs, and exposed services on your hosts before an attacker does. Here is how to run one that produces action, not noise.
DevOps Key Metrics: The Numbers That Actually Predict Delivery Health
The DevOps key metrics worth tracking are the four DORA measures plus a handful of security signals. Here is what each one means, how to measure it, and why security belongs in the same dashboard.
iOS App Security Testing: A Practical Guide for Mobile Teams
iOS app security testing means checking storage, transport, and third-party code, not just trusting the App Store review. Here is how to do it well.
Whitebox Testing Explained: A Practical Security Guide
Whitebox testing is a testing approach where the tester has full access to source code, architecture, and internals, which makes it powerful for finding security flaws early. Here is how it works and where it fits.
How to Run a Software Security Assessment
A software security assessment is a structured evaluation of an application's security posture across code, dependencies, configuration, and process. Here is how to run one that produces action, not a PDF.
Secure Usage of Authorized Code Repositories: A Practical Guide
Secure usage of authorized code repositories means controlling who can access source, protecting branches, scanning for secrets, and treating the repo as production infrastructure. Here is how.
Jakarta and Java: A Security Guide to the Namespace Migration
Jakarta Java is the successor to Java EE, and the javax-to-jakarta namespace shift has real security implications for anyone still running the old libraries.
Vulnerable Websites List: Legal Sites to Practice Security Testing
A curated vulnerable websites list of intentionally insecure apps and labs built for legal, hands-on security practice — plus the rules that keep your training from becoming a crime.
Vulnerability Checker: How to Scan Your Code and Websites for Flaws
What a vulnerability checker does, the different kinds (dependency, website, container), and how to choose and use one to actually reduce risk rather than generate noise.
Serialize vs Deserialize: A Practical Comparison and Why Deserialization Is the Risky One
Serialize turns an object into bytes; deserialize turns bytes back into an object. The comparison matters for security because deserializing untrusted data in Java has caused some of the worst RCE bugs on record.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.