Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
What Is Ethical Hacking? A Practical Security Guide
Ethical hacking is authorized, scoped testing that finds weaknesses before criminals do. Here is how it works, what the phases are, and where it fits alongside automated scanning.
AWS DevOps Security Best Practices: A Practical Guide
The AWS DevOps security best practices that matter most are least-privilege IAM, immutable pipelines, and shifting scanning left into CI. Here is how to apply them without slowing delivery.
Checkmarx Braga: How the Portugal R&D Hub Shapes Its AppSec Platform
Checkmarx Braga is one of the vendor's engineering centers, and it helps explain how the company builds its SAST and application security tooling. Here is what that means for teams evaluating the platform.
What Is a Code Analyzer? A Practical Security Guide
A code analyzer inspects source or compiled code for bugs and security flaws before they ship. Here is how the different types work and where they fit in a pipeline.
How a Code Error Solver Helps You Fix Bugs Without Adding Risk
A code error solver turns cryptic stack traces into fixes, but the tempting one-line patch it hands you can quietly introduce a vulnerability. Here is how to use one safely.
What Is a Code Injection Attack and How Do You Prevent It?
A code injection attack tricks an application into running attacker-supplied code as if it were trusted. Here is how the class works and how to shut it down.
CVE-2017-13766 and the Profinet Protocol: What the Wireshark Flaw Means
CVE-2017-13766 is an out-of-bounds write in Wireshark's Profinet I/O protocol dissector. Here is what it affects, why it matters, and how to fix it.
CVE-2022-31159: Path Traversal in the AWS SDK for Java
CVE-2022-31159 is a partial path traversal flaw in the AWS SDK for Java v1's S3 TransferManager. Here is who it affects, how it works, and how to fix it.
DevSecOps Threat Modeling: Baking Threat Analysis Into Your Pipeline
DevSecOps threat modeling moves risk analysis out of one-off workshops and into the delivery pipeline, so teams find design flaws before they ship.
eslint-plugin-security: How to Catch Node.js Security Bugs at Lint Time
eslint-plugin-security adds static-analysis rules to ESLint that flag risky Node.js patterns before they ship. Here is how to configure it and read its warnings without drowning in noise.
firebase/php-jwt: Verifying JWTs Without Getting Burned
firebase/php-jwt is the de facto library for encoding and decoding JSON Web Tokens in PHP. Here is how to use it correctly and avoid the algorithm-confusion trap.
How To Handle a Zero-Day Vulnerability: A Response Playbook
A zero-day has no patch on day one, so your first move is containment and exposure reduction, not waiting on a vendor fix. Here is how to handle a zero-day vulnerability under pressure.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.