Security
In-depth guides and analysis on security from the Safeguard engineering team.
100 articles
Cybersecurity SDK: Building Security Into Your Application from Code
A cybersecurity SDK gives developers ready-made libraries for the security work they would otherwise get wrong — crypto, auth, scanning, and secrets. Here is how to choose and use one well.
Enterprise Security Products: How to Build a Stack That Fits
Enterprise security products span identity, endpoint, network, cloud, and application layers. Here is how the categories fit together and how to avoid buying overlap.
CVE-2023-41080: Apache Tomcat Open Redirect in FORM Authentication
CVE-2023-41080 lets a crafted URL trigger an open redirect during FORM login on Tomcat's ROOT web app. Here is the exact condition, affected versions, and the one-line fix path.
CVE-2022-42919: Python's multiprocessing Privilege Escalation Explained
A local privilege escalation in Python's multiprocessing forkserver on Linux. Here is what CVE-2022-42919 does, which versions are affected, and how to remediate.
Enterprise Level Security: A Practical Guide
Enterprise level security is less about buying premium tools and more about controls that hold up under scale, audit, and adversaries. Here is what actually distinguishes it.
Serialisation in Java: A Security Guide
How Java serialisation works, why deserialising untrusted data is dangerous, and the filters and patterns that keep it from becoming remote code execution.
ngx-cookie-service: Secure Cookie Handling in Angular
ngx-cookie-service makes reading and writing cookies in Angular trivial, but the security depends entirely on the flags you set. Here is how to use it without leaking session data.
snyk.io: What It Is, What It Costs, and How It Fits Your Stack
A straight look at snyk.io: what the platform scans, how its 2025 pricing tiers and test caps work, and where it fits alongside other security tooling.
Who Is Snyk's General Counsel, and Why Vendor Legal Governance Matters
The Snyk general counsel runs legal, privacy, and regulatory affairs for a developer security vendor. Here's what that role tells you about evaluating any security supplier.
PyPI Security News: How to Track and Respond to Python Package Threats
Keeping up with PyPI security news is now part of the job for any Python team. Here is how to follow the threats that matter and act before a malicious package reaches production.
oidc-client-ts: A Security Guide for Browser OIDC
oidc-client-ts is the maintained TypeScript library for adding OpenID Connect and OAuth2 to browser apps. Here is how to use it, and how to avoid the token-handling mistakes that undo its security.
Snyk Revenue Explained: ARR, Valuation, and the Road to IPO
Snyk revenue crossed $300M in annual recurring revenue with a $7.4B valuation. Here is what the numbers say about the developer-security market.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.