Security
In-depth guides and analysis on security from the Safeguard engineering team.
100 articles
Snyk Login: A Security Guide to Authentication and Access
The Snyk login flow supports SSO, identity-provider integration, and CLI token auth. Here is how each works and how to keep your Snyk account access secure.
JavaScript Code Injection: How It Works and How to Prevent It
JavaScript code injection happens when an application treats untrusted input as executable code. This guide explains the attack class conceptually and focuses on detection and prevention.
Getting Value From a Wiz Demo: What to Test in the Security Graph
How to run a Wiz demo that tells you something real — connecting your own cloud, chasing attack paths and toxic combinations, and the questions that reveal fit.
Is vite-plugin-static-copy Safe? Understanding CVE-2025-57753 and Path Traversal
vite-plugin-static-copy is a popular Vite asset plugin, but one version range shipped a directory traversal flaw. Here is what to know and how to patch.
regenerator-runtime: What It Is and Whether to Worry
regenerator-runtime shows up in thousands of dependency trees, usually transitively. Here is what it does, why it is there, and how to think about its risk.
Web Session Management: A Security Guide for Developers
Web session management is how an application remembers who a user is across stateless HTTP requests. Get the session identifier, storage, and lifecycle wrong and you hand attackers the keys.
Snyk Reviews: An Honest Look at the Developer Security Platform
What Snyk reviews consistently praise, where users push back, and how to judge whether it fits your team. A balanced read on the developer-first security platform based on public feedback.
browser-image-compression: Is Client-Side Image Compression Safe?
browser-image-compression shrinks images in the browser before upload. Here is how it works, its security trade-offs, and why client-side compression is never validation.
Is Java Safe? A Realistic Look at Java Security in 2025
Is Java safe? The language has strong built-in protections, but real Java risk lives in dependencies, deserialization, and configuration. Here is the honest picture.
How Is DevOps Delivery Value Measured?
How DevOps delivery value is measured in practice: the four DORA metrics, why security belongs in the picture, and the traps that make the numbers lie.
Capture the Flag Cyber Security: How CTF Games Work
Capture the flag cyber security competitions turn real security skills into a game where you find hidden flags by breaking, analyzing, and defending systems. Here is how they work and why they build practitioners.
Snyk and Log4j: Finding and Fixing Log4Shell in Your Dependencies
Snyk can detect the Log4Shell family of Log4j vulnerabilities across your dependency tree, including transitive ones. Here is what it finds, how the fix path works, and the limits to know.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.