Security
In-depth guides and analysis on security from the Safeguard engineering team.
521 articles
Java Stream Sum: How to Add Numbers Safely in Java
A practical look at computing a Java stream sum correctly, from IntStream.sum() to reduce(), plus the overflow and null pitfalls that turn a simple total into a bug.
What jQuery Migrate Is and How to Use It Securely
jQuery Migrate helps older code survive newer jQuery releases, but leaning on it can quietly keep you on a vulnerable jQuery version. Here is how to use it without inheriting old XSS bugs.
jQuery Validation: A Security Guide to XSS and ReDoS Risks
The jQuery Validation plugin is convenient, but client-side validation is not a security control. Here is where jquery validation has been vulnerable and how to use it safely.
Malicious Code Meaning: A Practical Definition for Developers
Malicious code is any software written to damage, disrupt, or gain unauthorized access to a system. Here is what the term actually covers and how it reaches your stack.
The MIT Licence Explained: What It Permits and Its Security Implications
The MIT licence is one of the most permissive open source licences in use, and understanding what it allows tells you a lot about the risk you inherit with a dependency.
What Is a PAT Token and How Do You Keep It Secure?
A PAT token is a personal access token that stands in for your password when scripts and tools talk to services like GitHub. Here's how it works and how to stop it leaking.
How to Secure Cloud Applications: A Practical Guide
Securing cloud applications means protecting the code, the dependencies, the identities, and the runtime together. Here is a practical way to think about all four.
How to Fix the SnakeYAML Vulnerability (CVE-2022-1471)
The SnakeYAML vulnerability fix comes down to one move: get off the 1.x line and onto 2.x, where the parser stops trusting arbitrary Java types by default.
spring-security-crypto: What It Does and How to Use It Safely
The spring-security-crypto module gives Spring apps password hashing, symmetric encryption, and key generation without pulling in the full security framework. Here is how to use each piece correctly.
How to Test PHP Code Securely (Testar PHP the Right Way)
A practitioner's guide to testing PHP code for security bugs, from unit tests that assert on input handling to SAST and dependency scanning in CI.
User Session Management: A Security Guide
Session management is where most authentication bugs actually live. This guide covers how to issue, store, rotate, and revoke sessions without opening holes attackers walk straight through.
The Best Veracode Competitors and Alternatives for AppSec in 2025
The strongest Veracode competitors trade portal-first workflows for developer-native scanning. Here is how Snyk, Checkmarx, SonarQube and others compare on speed, coverage, and pricing.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.