appsec
Safeguard articles tagged "appsec" — guides, analysis, and best practices for software supply chain and application security.
591 articles
The Most Common Software Vulnerabilities and How to Prevent Them
The handful of common software vulnerabilities that keep showing up in real breaches, why they persist, and the concrete practices that shut each one down.
SQL Injection Cheat Sheet: Detection and Defensive Patterns
A defensive SQLi cheat sheet that shows how injection works conceptually, how to spot it in code and traffic, and the parameterization patterns that actually stop it.
What Is a DAST Solution? Choosing Dynamic Testing for Web Apps
A DAST solution tests your running application from the outside, the way an attacker would. Here is how dynamic testing works, what it catches, and how to pick one that fits your pipeline.
Inversion of Control in JavaScript: The Security Angle Nobody Explains
Inversion of control in JavaScript decouples your code from its dependencies, but handing over instantiation also hands over a piece of your attack surface. Here is how to get the design benefit without the security cost.
What Is Literal SQL Statement Injection, and How Do You Stop It?
Literal SQL statement injection happens when user input is concatenated straight into a query string. Here is how the attack works and how to shut it down.
Snyk Secret Scanning: How It Detects Hardcoded Secrets
Snyk secret scanning finds hardcoded credentials in your code as part of Snyk Code's SAST engine and, more recently, through the dedicated Snyk Secrets product. Here is what each covers and where the gaps are.
Static Code Scan: How SAST Finds Bugs Before They Ship
A static code scan analyzes source without running it, catching injection, secrets, and unsafe patterns early. Here is what it can and cannot see, and how to wire one into CI.
What Is a Vulnerability in Cyber Security? A Plain-English Guide
A vulnerability in cyber security is a weakness an attacker can exploit. Here is how vulnerabilities differ from threats and risks, and how teams find and fix them.
Understanding DOM XSS Payloads: How They Work and How to Stop Them
DOM XSS payloads execute entirely in the browser when untrusted input reaches a dangerous sink like innerHTML or eval. Here is how the class works and how to shut it down without shipping exploit code.
Open Redirect Vulnerabilities: How Attackers Abuse Them
An open redirect attack abuses a trusted domain's own redirect functionality to send victims to a malicious site — low severity on its own, but a key ingredient in phishing and OAuth token theft.
What Is Checkmarx? A Plain-English Overview
Checkmarx is one of the oldest names in static analysis, built for large enterprises with dedicated security teams. Here's what it actually does and how it stacks up.
XSS Tutorial: How Cross-Site Scripting Works and How to Stop It
A defender's XSS tutorial covering the three attack types, why they still slip through, and the encoding and CSP controls that actually prevent them.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.