appsec
Safeguard articles tagged "appsec" — guides, analysis, and best practices for software supply chain and application security.
596 articles
Java URLEncode: How to Encode URLs Safely in Java
Java urlencode is usually URLEncoder.encode, but it is built for form bodies, not full URLs. Here is when to use it and when it introduces bugs.
What is Application Security (AppSec)
Application security spans SAST, SCA, secrets and container scanning. See how AppSec differs from DevSecOps, why it's now board-level, and how Safeguard prioritizes fixes.
Android Application Security Solutions That Reduce Real Risk
Android application security solutions span secure storage, network hardening, code protection, and dependency scanning. Here is what each layer covers and how iOS compares.
Static Application Security Testing (SAST)
SAST scans source code for exploitable flaws before deployment. Learn how it works, how it differs from DAST/SCA, and where it falls short.
JavaScript Injection Attacks: Types and Prevention
JavaScript injection covers a family of attacks where untrusted input becomes executable code or markup in the browser. Here are the types and the concrete defenses for each.
LDAP Injection Attacks: How They Work and How to Prevent Them
LDAP injection lets an attacker manipulate directory-service queries by inserting special filter characters into user input, often bypassing authentication entirely — here's how the attack works and how to stop it.
SAST and DAST Full Form: What the Acronyms Actually Mean
The SAST and DAST full form is Static and Dynamic Application Security Testing. Here is what each one does, where they differ, and when to use both.
Stored XSS Explained: A Security Guide
Stored XSS is the persistent, high-impact form of cross-site scripting where a malicious script is saved server-side and served to every visitor. Here is how to detect and stop it.
XXE Attack Example: How XML External Entity Injection Works and How to Stop It
A defensive XXE attack example that explains how XML External Entity injection abuses parsers, what it can expose, and the parser settings that shut it down.
SAST vs DAST: Key Differences
SAST reads code before it runs; DAST attacks it while it's live. Here's what each catches, what each misses, and when to run both.
The Snyk Logo: The Story Behind Patch the Guard Dog
The Snyk logo is a friendly Doberman named Patch, and the choice of a guard dog says more about the company's positioning than a wordmark ever could.
What Is Snyk Code? A Guide to the SAST Often Misspelled "Synk Code"
"Synk Code" is a common misspelling of Snyk Code, Snyk's developer-first SAST engine. Here is what it scans, how DeepCode AI works, and where it fits.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.