Security
In-depth guides and analysis on security from the Safeguard engineering team.
100 articles
Snyk Docs: A Practical Guide to Finding What You Need
The Snyk docs at docs.snyk.io cover four scanning products and a maze of integrations. Here's how they're organized and the fastest path to the page you actually want.
Trivy vs Snyk: A Practical Comparison for Real Pipelines
Trivy vs Snyk is really open-source scanner versus commercial platform. Here is where each wins, where they overlap, and why many teams run both.
How to Choose a Vulnerability Assessment Solution
A vulnerability assessment solution finds, ranks, and tracks weaknesses across your systems. Here is what separates a useful one from a report generator.
Source Code Protection: How to Keep Your Codebase From Leaking
Source code protection is less about obfuscation and more about controlling access, catching secrets before they leak, and knowing when your code has escaped. Here is how to do it.
The AGPL Licence Explained: Obligations and Real Risks
The AGPL licence closes the SaaS loophole in the GPL by triggering source-sharing over the network. Here is what it obliges, and where it bites teams by surprise.
JavaScript DI: Dependency Injection Patterns and Their Security Impact
JavaScript DI (dependency injection) decouples your code, but the container that wires it together is also a place security can slip. Here is how to use it well.
Cloud Audit: How to Audit Your Cloud Environment for Security
A cloud audit is a systematic review of your cloud accounts against security and compliance baselines. Here is a practical process covering identity, configuration, logging, and evidence.
Snyk Valuation: How Much Is Snyk Worth?
Snyk's valuation peaked at $8.5 billion in 2021, then repriced through later rounds and investor markdowns. Here is the documented timeline and what it signals.
Threat Model Examples: Walkthroughs You Can Actually Copy
Concrete threat model examples for a web app, an API, and a CI/CD pipeline, using STRIDE and data flow diagrams to show how the process works end to end.
ngx-bootstrap Security: What to Know After the 2025 npm Compromise
ngx-bootstrap is a popular Angular component library that was hit by a real npm supply-chain attack in September 2025. Here is what happened, what to check, and how to use it safely.
Interactive Application Security Testing Tools: How IAST Works and When to Use It
IAST watches your running application from the inside during normal testing, catching real, reachable flaws that static scanners can only guess at.
CVE-2023-34455: snappy-java's Unchecked Chunk Length DoS
CVE-2023-34455 lets an attacker crash a JVM by feeding snappy-java a bogus chunk length. Here is the root cause, affected versions, and the fix.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.