appsec
Safeguard articles tagged "appsec" — guides, analysis, and best practices for software supply chain and application security.
591 articles
What Is an API Security Tool and How Do You Actually Choose One?
An API security tool inspects, tests, and monitors your APIs for the flaws attackers hunt for. Here is how the categories differ and how to pick the right one.
How to Scan Websites for Security Issues
A practical walkthrough of how to scan websites for common vulnerabilities, which tools fit which job, and how to turn scan output into fixes.
Snyk News: What Recent Developments Mean for Security Teams
A practitioner's read on recent Snyk news, its acquisitions and IPO signals, and what the company's direction means for teams choosing a developer-security tool.
A Practical Race Condition Example (and How to Fix It)
A race condition example is easiest to understand through a bank-balance check-then-act bug. Here is the anatomy, the exploit, and three ways to close it.
org.owasp.esapi: What the OWASP ESAPI Library Is and How to Use It Safely
org.owasp.esapi is the Maven coordinate for OWASP ESAPI, a Java security control library. Here is what it does, where it still helps, and the CVEs to watch.
What Is This Code? How to Read and Secure Unfamiliar Source
A practical method for answering "what is this code?" when you inherit an unfamiliar file, plus how to spot the security problems hiding inside it.
Application Vulnerability Management: Program Basics
A working definition of application vulnerability management and the five program elements that separate a real practice from a pile of scanner tickets.
The OWASP API Top Ten: What Every API Team Needs to Secure
A practical walkthrough of the OWASP API Top Ten (2023 edition), with the authorization, resource-consumption, and inventory gaps that actually get APIs breached.
What Is the NVD (National Vulnerability Database)?
The NVD is the U.S. government's repository of analyzed vulnerability data, built on top of the CVE program — here's what it actually adds, how CVE and NVD relate, and where its data comes from.
Static Source Code Analysis Tools: A Practical Guide
A practical walkthrough of what static source code analysis tools actually check, where they miss, and how to pick one without buying a shelf-ware scanner.
What Is a CWE? Common Weakness Enumeration Explained
What is a CWE in cyber security, how it differs from a CVE, and how the Common Weakness Enumeration turns one-off bugs into patterns you can prevent systematically.
SQL Injection Tutorial: How It Works and How to Stop It
This SQL injection tutorial explains the attack conceptually and focuses on what actually matters: detecting the flaw in your own code and closing it with parameterized queries.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.