appsec
Safeguard articles tagged "appsec" — guides, analysis, and best practices for software supply chain and application security.
591 articles
SQL Injection Prevention Cheat Sheet
A practitioner's SQL injection cheatsheet: parameterized queries, safe ORM use, input validation, least privilege, and the exact patterns to ban in review.
XSS Examples: Real Payloads and How They Execute
Concrete XSS examples across HTML, attribute, and JavaScript contexts, with the payloads that trigger them and why each one runs.
Does a Code Quality Tool Actually Make Your Software More Secure?
A code quality tool and a security scanner overlap more than teams realize. Here is where quality gates catch real vulnerabilities and where you still need dedicated AppSec tooling.
Peter McKay and Snyk: What His Tenure Says About Developer Security
Peter McKay led Snyk through its hypergrowth years as CEO. Here is what his tenure reveals about the developer-first security market and how to evaluate the tools it produced.
What Is a PHP Security Scanner and Which One Should You Use?
A PHP security scanner inspects your code and dependencies for injection flaws, insecure configuration, and known CVEs. Here is how the different tool classes work and where each fits.
Mend Security Explained: What Mend.io Does and How It Works
A clear look at Mend security: what the platform formerly known as WhiteSource covers, how its automated remediation works, and where its strengths and gaps lie.
LDAP Injection Explained With a Real Example
A walkthrough of a concrete LDAP injection example, why the filter syntax makes it dangerous, and how to detect and remediate it in real code.
Python SSL: How to Verify TLS Certificates the Right Way
The Python ssl module gives you safe defaults for free, but only if you use them. Here is how to set up certificate verification correctly and avoid the mistakes that quietly disable it.
Static Code Analysis Tools: The Open Source Options
Static code analysis tools open source teams actually use — Semgrep, CodeQL, Bandit, ESLint security plugins — and where each one's coverage runs out.
SAST Scans Explained: How Static Analysis Finds Code Flaws
SAST scans read your source code without running it, tracing untrusted data from input to sink to catch injection and other flaws before they ship.
Cloud Application Security Best Practices
Five layers cover most of the risk in cloud apps: identity, secrets, artifact scanning, pipeline gates, and runtime guardrails. Here is how to build each one without slowing delivery.
SAST vs DAST: When to Use Each (and Why Not Either/Or)
SAST and DAST test different layers of an application at different stages of the pipeline — the real question isn't which to pick, it's how to run both without duplicating effort.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.