Security
In-depth guides and analysis on security from the Safeguard engineering team.
523 articles
Benefits Of Ethical Hacking: A Security Guide
The benefits of ethical hacking come down to one thing: finding your weaknesses before an attacker does, on your terms and with a report you can act on.
What Does CVE Stand For? A Plain-Language Security Guide
CVE stands for Common Vulnerabilities and Exposures, the public catalog that gives every known security flaw a single, shareable name. Here is how the system works and why it matters.
The Best Veracode Competitors and Alternatives for AppSec in 2025
The strongest Veracode competitors trade portal-first workflows for developer-native scanning. Here is how Snyk, Checkmarx, SonarQube and others compare on speed, coverage, and pricing.
User Session Management: A Security Guide
Session management is where most authentication bugs actually live. This guide covers how to issue, store, rotate, and revoke sessions without opening holes attackers walk straight through.
How to Test PHP Code Securely (Testar PHP the Right Way)
A practitioner's guide to testing PHP code for security bugs, from unit tests that assert on input handling to SAST and dependency scanning in CI.
spring-security-crypto: What It Does and How to Use It Safely
The spring-security-crypto module gives Spring apps password hashing, symmetric encryption, and key generation without pulling in the full security framework. Here is how to use each piece correctly.
How to Fix the SnakeYAML Vulnerability (CVE-2022-1471)
The SnakeYAML vulnerability fix comes down to one move: get off the 1.x line and onto 2.x, where the parser stops trusting arbitrary Java types by default.
How to Secure Cloud Applications: A Practical Guide
Securing cloud applications means protecting the code, the dependencies, the identities, and the runtime together. Here is a practical way to think about all four.
What Is a PAT Token and How Do You Keep It Secure?
A PAT token is a personal access token that stands in for your password when scripts and tools talk to services like GitHub. Here's how it works and how to stop it leaking.
The MIT Licence Explained: What It Permits and Its Security Implications
The MIT licence is one of the most permissive open source licences in use, and understanding what it allows tells you a lot about the risk you inherit with a dependency.
Malicious Code Meaning: A Practical Definition for Developers
Malicious code is any software written to damage, disrupt, or gain unauthorized access to a system. Here is what the term actually covers and how it reaches your stack.
jQuery Validation: A Security Guide to XSS and ReDoS Risks
The jQuery Validation plugin is convenient, but client-side validation is not a security control. Here is where jquery validation has been vulnerable and how to use it safely.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.