Application Security
Safeguard articles tagged "Application Security" — guides, analysis, and best practices for software supply chain and application security.
100 articles
What is a port scan and what does it tell an attacker?
A port scan probes a host to see which ports answer. Learn how TCP replies show open, closed and filtered ports, and how to scan your own systems safely.
What is a perimeter firewall and what can it not protect?
A perimeter firewall filters traffic where your network meets the internet. It blocks unwanted flows in and out but cannot see inside the network.
What is a payload based signature in intrusion detection?
A payload based signature matches known bytes inside network traffic. Learn what it catches, how attackers evade it and how to tune it for fewer alerts.
What is a DNS firewall and does your network need one?
A DNS firewall blocks lookups to known bad domains before a connection starts. See how it works, what it misses and how to roll one out safely.
What is a DKIM record and how do you set one up correctly?
A DKIM record is a DNS TXT entry holding the public key that receivers use to verify your email signatures. Learn selectors, key size and how to test it.
What is a dictionary attack and how do you stop one?
A dictionary attack tries likely passwords from a list instead of every combination. Stop it with blocklists, rate limits, long passwords and MFA.
What is a container firewall and do you need one?
A container firewall limits which containers talk to each other and to the outside. Kubernetes NetworkPolicy covers the basics if your plugin enforces it.
What is a cloud secure web gateway and when do you need one?
A cloud secure web gateway filters and inspects web traffic from a hosted service instead of an office proxy. See what it does, the trade-offs and checks.
What does a VPN protect, and what are its real benefits?
A VPN encrypts traffic to a gateway and can add authentication and access control. It does not stop phishing or secure the device. Know its limits.
What are the top web security threats developers should know?
The OWASP Top 10 groups web risks such as broken access control, injection and misconfiguration. Learn what each means in code and the fix that works.
What are the benefits of using SAST and DAST together?
SAST reads source early and points to the line. DAST attacks the running app and sees real behavior. Together they catch different flaws with fewer gaps.
What are SCADA systems and how do you secure them?
SCADA systems supervise and control industrial processes such as power and water. Secure them with segmentation, tight remote access and manual fallbacks.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.