Application Security
Safeguard articles tagged "Application Security" — guides, analysis, and best practices for software supply chain and application security.
100 articles
What does a website security score actually measure?
A website security score usually grades visible settings such as HTTPS, HSTS, CSP and cookie flags. It checks configuration, not whether a site is safe.
What does a web application firewall block, and what does it miss?
A WAF applies rules to HTTP traffic to stop attacks like SQL injection and XSS but cannot fix the app. Learn modes, tuning and what logic flaws slip by.
WAF vs Firewall: What Does Each One Actually Inspect?
A network firewall filters by address, port and connection state. A WAF reads HTTP requests for a web app. You usually need both. Here is where each stops.
How is a WAF architected, and where does it sit?
A WAF sits in front of your app as a server module, reverse proxy or cloud edge service. See the placement, TLS and parsing trade-offs and a safe rollout.
Vulnerability vs weakness: what is the difference in application security?
A weakness is a type of flaw, like CWE-78. A vulnerability is a specific, exploitable instance in a product, like a CVE. Learn how to use each in triage.
What are the stages of the vulnerability management lifecycle?
The vulnerability management lifecycle is know, plan, execute, verify, monitor. See each step and how NIST and CISA suggest ranking what to fix first.
How do you start building a VS Code extension, and keep it safe?
Scaffold with the Yeoman generator, run it in the Extension Development Host, learn contribution points, and treat dependencies and permissions with care.
What is VPN split tunneling and is it safe to allow?
Split tunneling sends only some traffic through the VPN and the rest straight to the internet. It saves bandwidth but loses inspection. Decide by risk.
What are the alternatives to a VPN for remote access?
Zero trust access, identity aware proxies, jump hosts and per app tunnels can replace a flat VPN. See how each works and how to move step by step.
Where does a virtual firewall fit in a zero trust design?
In zero trust a virtual firewall is a policy enforcement point fed by identity and device signals, not a wall around a trusted zone. See where it fits.
What is a virtual firewall and when do you need one in the cloud?
A virtual firewall filters traffic between virtual machines and networks in software. Learn when cloud security groups are enough and when more is needed.
Why does a vibe-coded Node.js file upload API end up vulnerable?
AI-generated upload code often works on the first try and skips the checks that matter. Review type, name, size, storage and permissions before you ship.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.