authorization
Safeguard articles tagged "authorization" — guides, analysis, and best practices for software supply chain and application security.
36 articles
spring-security-core: A Practical Security Guide
The spring-security-core artifact is the foundation of Spring Security, providing authentication and authorization primitives. Here is how to use it safely.
API Security: A Clear Definition and What It Covers
The API security definition is straightforward: protecting the APIs that expose your data and logic from misuse, abuse, and unauthorized access. What that covers in practice is broader than most teams assume.
OWASP 2019: The API Security Top 10 That Reshaped API Testing
The OWASP release everyone means by 2019 is the first API Security Top 10, which put authorization flaws — not injection — at the center of API risk.
OPA Policy Language: A Practical Guide to Rego
The OPA policy language is Rego, a declarative language for writing authorization and admission-control rules that live outside your application code. Here's how it works and how to keep it secure.
Defending LLM agents against confused-deputy attacks on their tool privileges
An LLM agent with tools is a deputy that holds privileges its users do not. Attackers exploit that gap by tricking the agent into using those privileges on their behalf — here is how to design defenses that hold up.
Rego Policy Language: How OPA Turns Rules Into Code
Rego is the declarative policy language behind Open Policy Agent. This guide explains how it works, where it fits in a security pipeline, and how to write policies you can trust.
Securing a REST API: A Defense-in-Depth Checklist
Securing a REST API means layering authentication, authorization, input validation, and rate limiting so no single control is the only thing standing between an attacker and your data.
MCP Server Authentication and Authorization: Securing the AI Tool Layer
The Model Context Protocol enables AI agents to interact with external tools and data sources. Securing MCP servers requires authentication, authorization, and input validation patterns specific to the AI agent context.
OWASP API Top 10 2023: What Changed and How to Defend
The OWASP API Security Top 10 2023 puts authorization failures at the top and adds new risks around business flows and API consumption. Here's the full list with defenses.
The OWASP API Top Ten: What Every API Team Needs to Secure
A practical walkthrough of the OWASP API Top Ten (2023 edition), with the authorization, resource-consumption, and inventory gaps that actually get APIs breached.
MCP Server Authorization Patterns in 2026
The Model Context Protocol shifted agent integration from custom glue to a standard surface. Authorization patterns that work, and the ones that keep biting teams.
What Is ABAC (Attribute-Based Access Control)
ABAC decides access by evaluating attributes of the user, resource, action, and environment against policy rules. Learn how it works and when to choose it over roles.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.