appsec
Safeguard articles tagged "appsec" — guides, analysis, and best practices for software supply chain and application security.
596 articles
Online Vulnerability Scan: How to Test Your App on the Web
What an online vulnerability scan actually checks, how hosted scanners differ from installed tools, and how to run one without breaking your production site.
Java Vulnerability Scanner: How It Works and What to Use
A Java vulnerability scanner inspects your dependencies, bytecode, and running app for known CVEs and insecure patterns. Here is how each type works.
Synk SAST (Snyk Code): A Practical Guide to Snyk's Static Analysis
Searching for 'Synk SAST' usually means Snyk Code, Snyk's static application security testing tool. Here is what it does, how it works, and where it fits in your pipeline.
Security Plugins for CMS and App Platforms: What They Actually Do
A security plugin can harden a CMS meaningfully, but it can't fix a vulnerable core install or a poorly coded theme — it's a layer, not a replacement for patching.
Blind SQL Injection: A Practical Cheat Sheet
This blind sql injection cheat sheet covers how boolean-based and time-based blind attacks actually work, why they succeed against apps with no visible error output, and how to close them off.
Application Layer Security: What It Covers (and What It Doesn't)
Application layer security protects the code, logic, and APIs at the top of the OSI stack, but it's easy to confuse it with network or infrastructure security controls that solve a different problem.
Application Vulnerability Testing Methods, Compared
Application vulnerability testing spans static analysis, dynamic testing, dependency scanning, and manual review — each catches a different slice of application security vulnerabilities, and none covers all of them alone.
Who Is the CEO of Snyk, and Why It Matters for Buyers
The Snyk CEO question comes up during vendor evaluations for a reason: leadership shapes roadmap and stability. Here is who runs Snyk and how to read leadership signals as a buyer.
JavaScript Not Equal (!= vs !==): Why the Wrong One Is a Security Bug
The JavaScript not equal operators != and !== look interchangeable but aren't. Loose comparison triggers type coercion that has caused real auth bypasses. Here's how to compare safely.
How SQL Injection Works and How to Prevent It
How to perform SQL injection is really a question about how the attack class works so you can detect and stop it. A defensive walkthrough of the mechanism and the fixes that hold.
FedRAMP for AppSec Tools: What It Means for Government So...
FedRAMP 20x now demands machine-readable SBOM and vulnerability evidence, not static reports. Here's what changed, what it costs, and where Endor Labs stands.
PHP Code Analysis: Finding Security Bugs in PHP
How PHP code analysis works, which static and dynamic tools to use, and the PHP-specific vulnerability patterns worth hunting for in your codebase.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.