owasp
Safeguard articles tagged "owasp" — guides, analysis, and best practices for software supply chain and application security.
141 articles
Application Security Vulnerabilities: What They Are and How to Fix Them
Application security vulnerabilities are the flaws in your code, dependencies, and configuration that attackers exploit. This guide covers the common classes and how to find and fix them.
How a Web Application Penetration Test Actually Works (and What It Finds)
A web application penetration test simulates a real attacker against your app. Here is what the phases look like and how to act on the report.
MySQL Injection Cheat Sheet: How to Detect and Stop SQLi
A defender's MySQL injection cheat sheet: the query patterns attackers probe for, how login bypass and UNION-based extraction work, and how to shut them down.
Serialization vs. Deserialization in Java: Security Implications
The difference between serialization and deserialization in Java is simple to state and dangerous to get wrong — deserialization of untrusted data has caused some of the highest-severity Java CVEs of the last decade.
Command Injection Payloads: How They Work and How to Stop Them
Command injection payloads abuse applications that pass user input to a system shell. This defensive guide explains the mechanics, detection, and prevention.
The OWASP Logo and Brand: What It Means and How to Use It Correctly
The OWASP logo is a registered mark of a nonprofit, not a free-for-all badge. Here is what the wasp actually stands for and the rules for putting it on your site or slides.
SQL Injection for Beginners: How It Works and How to Stop It
SQL injection for beginners, explained without the hype: what the attack actually is, why string-built queries cause it, and the one habit — parameterized queries — that closes the door.
OWASP ASVS 5.0 Adoption Guide
OWASP ASVS 5.0 restructured the verification levels and added new requirements for modern stacks. A practical adoption guide for teams using ASVS as their security baseline.
SSRF Vulnerability Explained: How Server-Side Request Forgery Works and How to Stop It
An SSRF vulnerability lets an attacker make your server send requests on their behalf — the flaw behind the Capital One breach. Here's how it works and how to defend against it.
Web Security Scan: How to Find Vulnerabilities Before Attackers Do
A web security scan probes your application for exploitable flaws the way an attacker would. Here is how the main scan types work and how to run them well.
Web Application Security Assessment: How to Actually Test Your App
A web application security assessment is a structured evaluation of an app's exposure across code, dependencies, configuration, and runtime behavior. Here is how to run one that finds real issues.
SQL Injection Cheat Sheet: Detection and Defensive Patterns
A defensive SQLi cheat sheet that shows how injection works conceptually, how to spot it in code and traffic, and the parameterization patterns that actually stop it.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.