Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
JavaScript Injection Attack: How It Works and How to Stop It
A JavaScript injection attack runs attacker-controlled script in a victim's browser or a Node.js process. Here is how the attack class works and the defenses that actually neutralize it.
VS Code Proxy Settings: How to Configure and Secure Them
How to configure VS Code proxy settings for corporate networks, the difference between http.proxy and environment variables, and the security pitfalls to avoid.
Java URL Encode: How to Encode URLs Safely Without Introducing Bugs
The Java URL encode API is easy to reach for and easy to misuse. Here is when to use URLEncoder, when to use URI, and how the wrong choice becomes an injection risk.
Snyk on Wikipedia: The Company, History, and What It Does
A factual look at Snyk drawn from its Wikipedia entry and public record: who founded it, where it is based, what it builds, and how it fits into developer security.
aws-sdk-mock: Secure Testing and Migration to SDK v3
aws-sdk-mock targets AWS SDK v2, which is now in maintenance mode. Here is how it works, where the security risk lives, and how to migrate to aws-sdk-client-mock for v3.
spring-data-commons: A Security Guide
spring-data-commons underpins Spring Data's repository model, and one of its most infamous flaws - CVE-2018-1273 - turned property binding into remote code execution. Here is what to know.
Where Is Java Installed? Finding Your JDK (Including Homebrew)
Where is Java on your machine? Between system installs, Homebrew, and version managers you can easily run a JDK you didn't mean to. Here is how to find every one — and why the answer is a security question.
Securing AWS Infrastructure as Code: A Practical Guide
AWS infrastructure as code turns your cloud into version-controlled files, which means security review can shift left into the same pull request that provisions the resource.
How to Change the Java Version on a Mac Without Breaking Security
A practical guide to change the Java version on Mac using JAVA_HOME and jenv, plus why keeping the right JDK active is a security decision, not just a convenience.
log4j Remediation: How to Fully Patch Log4Shell
A practical log4j remediation walkthrough: which versions actually fix Log4Shell, how to find the library transitively, and what to do when you cannot upgrade yet.
Was ServiceNow Hacked? What the Data Exposure Incidents Actually Mean
The phrase 'ServiceNow hacked' usually points to misconfiguration and unauthenticated API access, not a core platform breach. Here is what happened and how to protect your instance.
SLSA in Canada: A Practical Supply Chain Security Guide
How Canadian teams can adopt SLSA to harden build pipelines, prove provenance, and align with federal and provincial procurement expectations.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.