appsec
Safeguard articles tagged "appsec" — guides, analysis, and best practices for software supply chain and application security.
596 articles
Ethical Hacking Workshop: How to Read and Learn Online
Looking to read an ethical hacking workshop online? Here is how to learn ethical hacking legally and safely, what a good curriculum covers, and how it connects to defending real software.
SQL Injection Example: How It Works and How to Stop It
A clear SQL injection example makes the vulnerability obvious. Here are illustrative cases, the main attack types, and the fixes that actually eliminate the risk.
XXE Attack Demo: Understanding and Defending Against XML External Entities
An XXE attack demo makes the vulnerability click: an XML parser that trusts external entities can be tricked into reading files or making requests. Here is how it works and how to shut it down.
What Are Security Logging and Monitoring Failures
Equifax went undetected for 76 days, Marriott for four years. Here's what security logging and monitoring failures are, why they happen, and how to close the gap.
What Is VAPT? A Practical Guide to Vulnerability Assessment and Penetration Testing
VAPT combines automated vulnerability assessment with hands-on penetration testing. Here is what each half actually does and how to run VAPT that finds real risk.
SQL Injection Examples: Real Attack Patterns and How to Stop Them
SQL injection examples that show the attack patterns behind the CWE, why they work, and the parameterized-query fix that stops all of them at once.
The xss npm Package: Sanitizing HTML Input Correctly
The xss npm package is a whitelist-based HTML sanitizer for Node and the browser. It works well — when you sanitize in the right place, with the right whitelist, for the right output context.
Software Security Issues: A Triage Framework
Most teams triage software security issues by severity score alone, which routinely gets the priority order wrong. A better framework weighs reachability and exposure too.
Tools in Cyber Security: A Starter Map by Category
The tools in cyber security span network defense, application security, identity, and data protection, and the fastest way to get oriented is a map by category rather than a vendor list.
xercesImpl: XXE Risks in Java XML Parsing and How to Configure It
The xercesImpl Maven artifact turns up transitively in thousands of Java builds. Here is its real CVE history, why XXE is your configuration's fault, and the hardening block to paste.
Cybersecurity Platforms: When Consolidation Wins
Consolidating point tools into a platform can cut cost and alert fatigue — or lock you into one vendor's blind spots. Here is a clear-eyed rule for when cybersecurity platforms pay off and when they do not.
What Is a Security Champion?
A security champion is a developer who advocates for security inside their team, bridging engineering and the security function. Learn the role, how programs work, and why they scale culture.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.