access-control
Safeguard articles tagged "access-control" — guides, analysis, and best practices for software supply chain and application security.
49 articles
Least Privilege for AI Agents: Why It's Harder Than It So...
AI agents break least-privilege assumptions built for humans: they chain tools, act autonomously, and compose narrow scopes into broad access no one reviewed.
Web Application Threats: What They Are and How to Defend Against Them
A practitioner's map of the web application threat landscape — injection, broken access control, supply-chain risk — and the defenses that actually blunt each one.
What Is an IAM Permission Boundary and When to Use One
An IAM permission boundary is a ceiling on what a role or user can ever do, no matter how generous their attached policies are. Here is how to wield it without locking yourself out.
The Main Types of Security Vulnerabilities, Explained
A practical tour of the main types of security vulnerabilities developers meet, from injection and broken access control to vulnerable dependencies, with defenses for each.
Secure Usage of Authorized Code Repositories: A Practical Guide
Secure usage of authorized code repositories means controlling who can access source, protecting branches, scanning for secrets, and treating the repo as production infrastructure. Here is how.
Was ServiceNow Hacked? What the Data Exposure Incidents Actually Mean
The phrase 'ServiceNow hacked' usually points to misconfiguration and unauthenticated API access, not a core platform breach. Here is what happened and how to protect your instance.
How to Set Up a Secure Source Code Repository
What makes a source code repository secure, from access control and secret scanning to branch protection and dependency review, with practical defaults.
CVE-2024-22234: The Spring Security Access Control Bypass Explained
CVE-2024-22234 is a broken access control flaw in Spring Security where isFullyAuthenticated returns true for a null authentication. Here is how it works and how to fix it.
What is Kubernetes RBAC
Kubernetes RBAC controls who can do what in your cluster. Here's how Roles, Bindings, and ClusterRoles work — and where they commonly fail.
What Is ABAC (Attribute-Based Access Control)
ABAC decides access by evaluating attributes of the user, resource, action, and environment against policy rules. Learn how it works and when to choose it over roles.
What Is RBAC (Role-Based Access Control)
RBAC grants permissions to roles, then assigns people to roles. Learn how this model simplifies access management, its core parts, and where it fits best.
What is IAM (Identity and Access Management)
IAM defines who and what can access your systems, and getting it wrong is a root cause behind breaches at Capital One, Toyota, Uber, and CircleCI.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.