Security
In-depth guides and analysis on security from the Safeguard engineering team.
100 articles
The ZAP Security Testing Tool: A Practical Guide
How the ZAP security testing tool works as a free DAST scanner: passive and active scanning, the spider and AJAX spider, and how to run it in CI without noise.
Licence logiciel : le guide securite pour choisir et rester conforme
Une licence logiciel definit ce que vous avez le droit de faire avec un code, et mal la gerer expose autant a un risque juridique qu'a un risque securite.
CVE-2023-36414: The Azure Identity SDK RCE You Should Patch
CVE-2023-36414 is a remote code execution flaw in the Azure Identity SDK for .NET. Here is how the injection works and which version closes it.
CVE-2023-44794: The Sa-Token Authentication Bypass Explained
A path-normalization mismatch lets attackers bypass route authentication in Dromara Sa-Token. Here is how CVE-2023-44794 works and how to fix it.
How to Prevent Buffer Overflow Vulnerabilities
Preventing buffer overflow comes down to bounds-safe code, compiler and OS protections, and testing. Here is how each defense works and where it fits.
DevOps Velocity Without Sacrificing Security: How Fast Teams Stay Safe
How high-velocity DevOps teams ship daily without trading away security — the automated gates, guardrails, and metrics that let speed and safety coexist.
How to Measure DevOps Success
Measuring DevOps success means tracking delivery speed, stability, reliability, and security together, so improvement in one area doesn't quietly degrade another. Here is a practical framework.
Jest Latest Version: Upgrading Safely in 2026
The Jest latest version is 30.x, and keeping current matters less for features than for cutting the pile of transitive dev dependencies older Jest drags in.
Black Duck Software Explained: SCA, BDSA, and Independence from Synopsys
Black Duck software is one of the oldest names in software composition analysis, now an independent company again after spinning out of Synopsys in 2024. Here is what it does.
Source Code Analyzer: How Static Analysis Finds Real Vulnerabilities
A source code analyzer reads your code without running it to find bugs and security flaws early. Here is how it works, what it catches, and how to run one without drowning in noise.
Agile Security Operations PDF Free Download: Legit Sources and Key Takeaways
Looking for an Agile Security Operations PDF free download? Here is how to get it legitimately and the ideas that make the book worth reading.
Snyk in the Gartner Magic Quadrant: What the 2025 AST Placement Means
Snyk was named a Leader in the 2025 Gartner Magic Quadrant for Application Security Testing. Here is what that placement does and does not tell buyers.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.