appsec
Safeguard articles tagged "appsec" — guides, analysis, and best practices for software supply chain and application security.
591 articles
JavaScript Exploits Explained: How They Work and How to Stop Them
A practitioner's tour of the JavaScript exploit classes that actually break production apps — prototype pollution, XSS, and malicious dependencies — with detection and fixes.
XSS Script Example: How Cross-Site Scripting Works and How to Stop It
A clear XSS script example shows how untrusted input becomes executable code in a victim's browser. Here is the anatomy of the three XSS types and the defenses that actually work.
What a Security Testing Service Does and When You Need One
A security testing service systematically probes your applications and infrastructure for weaknesses before attackers do. Here is what the different types cover and how to choose.
com.fasterxml.jackson.databind: Maven Coordinates, Modules, and Version Strategy
com.fasterxml.jackson.databind is the Java package, not the Maven groupId, and that mixup breaks builds weekly. Here are the correct coordinates, the module map, and a version strategy that survives audits.
How Do You Pronounce Snyk? The Definitive Answer
Snyk is pronounced sneak, like the verb. Here is where the name comes from, why people get it wrong, and what the tool actually does.
SQLi Cheat Sheet: Detection and Defense Guide
A practical SQLi cheat sheet covering how injection works, the patterns to recognize, and the parameterized-query defenses that actually stop it.
How to Fix Cross-Site Scripting Vulnerabilities in Java (With Examples)
A practical walkthrough of how to fix cross site scripting vulnerabilities in Java: context-aware output encoding, template auto-escaping, and where servlet code goes wrong.
How Application Security Risk Management Actually Works in Practice
A working model for application security risk management: how to inventory assets, rate risk you can act on, prioritize by exploitability and impact, and prove the program is reducing risk.
The OWASP Top 10, Explained: The Web App Risks That Matter Most
The OWASP Top 10 is the industry's reference list of the most critical web application security risks. Here is what each category means and how to defend against it.
Enterprise Rails Security Audit: 2025 Field Notes
After 14 Rails audits in the last 12 months, the same eight issues kept surfacing. Here's the 2025 field checklist for Rails 7.2 and 8.0 enterprise apps.
Showdown Markdown Converter: XSS Risks and Safe Configuration
The npm showdown library converts Markdown to HTML without sanitizing it — by design. Here is where the XSS risk actually lives and how to render untrusted Markdown safely.
How to Choose a Security Company for Modern Software
Picking a security company is less about brand recognition than about matching a vendor's real strengths to the risks your software actually faces. Here is a practical way to decide.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.