Security
In-depth guides and analysis on security from the Safeguard engineering team.
523 articles
How to Avoid NullPointerException in Java
The NullPointerException is Java's most common runtime crash. Here is how to avoid it with Optional, defensive coding, and the tools that catch nulls early.
JavaScript Injection Attack: How It Works and How to Stop It
A JavaScript injection attack runs attacker-controlled script in a victim's browser or a Node.js process. Here is how the attack class works and the defenses that actually neutralize it.
VS Code Proxy Settings: How to Configure and Secure Them
How to configure VS Code proxy settings for corporate networks, the difference between http.proxy and environment variables, and the security pitfalls to avoid.
Java URL Encode: How to Encode URLs Safely Without Introducing Bugs
The Java URL encode API is easy to reach for and easy to misuse. Here is when to use URLEncoder, when to use URI, and how the wrong choice becomes an injection risk.
Snyk on Wikipedia: The Company, History, and What It Does
A factual look at Snyk drawn from its Wikipedia entry and public record: who founded it, where it is based, what it builds, and how it fits into developer security.
aws-sdk-mock: Secure Testing and Migration to SDK v3
aws-sdk-mock targets AWS SDK v2, which is now in maintenance mode. Here is how it works, where the security risk lives, and how to migrate to aws-sdk-client-mock for v3.
spring-data-commons: A Security Guide
spring-data-commons underpins Spring Data's repository model, and one of its most infamous flaws - CVE-2018-1273 - turned property binding into remote code execution. Here is what to know.
Where Is Java Installed? Finding Your JDK (Including Homebrew)
Where is Java on your machine? Between system installs, Homebrew, and version managers you can easily run a JDK you didn't mean to. Here is how to find every one — and why the answer is a security question.
"The Code Is Correct!" and Other Myths That Hide Security Bugs
Passing tests and a clean review tell you the code is correct, but correctness and security are not the same thing. Here is where the gap lives.
SLSA in Canada: A Practical Supply Chain Security Guide
How Canadian teams can adopt SLSA to harden build pipelines, prove provenance, and align with federal and provincial procurement expectations.
Was ServiceNow Hacked? What the Data Exposure Incidents Actually Mean
The phrase 'ServiceNow hacked' usually points to misconfiguration and unauthenticated API access, not a core platform breach. Here is what happened and how to protect your instance.
log4j Remediation: How to Fully Patch Log4Shell
A practical log4j remediation walkthrough: which versions actually fix Log4Shell, how to find the library transitively, and what to do when you cannot upgrade yet.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.