appsec
Safeguard articles tagged "appsec" — guides, analysis, and best practices for software supply chain and application security.
596 articles
How to Avoid SQL Injection: A Developer's Guide
To avoid SQL injection, never build queries by concatenating user input, use parameterized queries everywhere, and treat every input as untrusted. Here's the defensive playbook.
SAST Definition: What Static Application Security Testing Actually Means
The SAST definition, in plain terms: analyzing source code for vulnerabilities without running it. Here is how it works, what it catches, and where it falls short.
Source Code Auditing: How to Find Bugs Before Attackers Do
Source code auditing is the systematic review of code for security flaws. Here is how to run one, where automation fits, and what humans still do better.
What Does SAST Mean? Static Application Security Testing, Explained
A plain-English answer to what SAST means, how static analysis finds vulnerabilities in source code, what it catches, what it misses, and where it fits alongside DAST and SCA.
LLM-Augmented Bug Discovery Methodology
A practitioner's methodology for using LLMs to augment — not replace — traditional bug discovery workflows, with patterns that hold up under real review load.
Snyk CTF: What Fetch the Flag Is and How to Prepare
The Snyk CTF, branded Fetch the Flag, is a free annual capture-the-flag competition. Here is what the challenges look like and how to get ready for one.
What is XML External Entity (XXE) Injection
XXE injection lets attackers abuse XML parsers to read files, trigger SSRF, or crash services. Here's how it works, real CVEs, and how to stop it.
WAF SQL Injection Protection: What It Catches and What It Misses
A WAF can block many SQL injection attempts at the edge, but treating it as your only defense is how breaches happen. Here is what WAF SQL injection rules actually do.
How to Check a Website for Vulnerabilities: A Practical Guide
A hands-on walkthrough of how to check a website for vulnerabilities, from passive header checks to authenticated dynamic scanning, and how to read the results.
DAST Definition: What Dynamic Application Security Testing Means
The DAST definition in one line: testing a running application from the outside by sending real requests to find exploitable vulnerabilities. Here is what that means in practice.
Free SAST Tools: The Best Open Source Scanners to Start With
The best free SAST tools include Semgrep, CodeQL, Bandit, and gosec. Here is what each one is good at and how to assemble a no-cost static analysis stack that actually catches bugs.
What Is a Package Vulnerability Scanner and How Do You Pick One?
A package vulnerability scanner checks your dependencies against known-CVE databases so you catch risky libraries before they ship. Here is how they work and what separates a good one.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.