python-security
Safeguard articles tagged "python-security" — guides, analysis, and best practices for software supply chain and application security.
96 articles
Is python.org Safe? What to Trust and What to Verify
The python.org website itself is the official, safe source for Python. The real risk lives one step downstream, on PyPI, where typosquatted packages wait for a typo.
Advanced Python: The Security-Focused Patterns Senior Developers Should Master
Advanced Python is not about clever one-liners. The patterns that separate senior engineers are the ones that keep code safe: safe deserialization, controlled subprocess calls, and disciplined dependency use.
flask-security-too: What It Is and How to Use It Securely
flask-security-too is the maintained successor to Flask-Security, giving Flask apps authentication, roles, and account features out of the box. Here is what it provides and how to configure it safely.
How to Open Python on Mac (and Do It Securely)
Recent macOS versions ship without Python at all, so opening Python on a Mac now means installing it yourself — and doing that safely matters more than most guides admit.
Tornado Python Security: Hardening Your Async Web App
A security-focused guide to the Tornado Python web framework, covering the cookie-parsing DoS, secure cookie configuration, and safe deployment patterns.
Python Code Analysis: Tools and Techniques for Secure Code
How static and dynamic Python code analysis catches security bugs before they ship, from Bandit and Semgrep to dependency scanning and taint tracking.
Pickling in Python: A Security Guide
Pickling in Python serializes objects to bytes, but unpickling untrusted data can run arbitrary code. Here is how the risk works and how to defend against it.
Werkzeug in Python: What Developers Need to Know About Security
Werkzeug powers Flask and countless WSGI apps in Python. Here is how to use it without leaving the interactive debugger or hostname checks open to attackers.
Can a Code Corrector Actually Make Your Python Safer?
A code corrector fixes style and syntax, but it rarely catches the security bugs that matter. Here is where a Python code corrector helps, where it fails, and what to run alongside it.
How to Check Python Code for Security Issues: A Practical Guide
A working method to check Python code for security defects, from static analysis of your own source to scanning the third-party packages you pull in.
How to Validate a URL in Python Safely
A practical guide to validating URLs in Python without opening SSRF or injection holes — what the standard library gives you, where it fails, and how to build a safe validator.
Python tracemalloc: Finding Memory Leaks and Why It Matters for Security
How to use Python tracemalloc to trace memory allocations, hunt leaks, and understand why unbounded memory growth is a real availability risk.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.