sca
Safeguard articles tagged "sca" — guides, analysis, and best practices for software supply chain and application security.
469 articles
Express.js Security Guide (2026)
Express is the default web framework for Node.js — and a small, deep dependency tree that has produced open-redirect, XSS, and ReDoS CVEs. Here is how to run Express safely in 2026.
How to Do a Secure Code Review: A Practical 2026 Guide
A practical 2026 walkthrough of secure code review — the process, the checklist, the real tools that automate it, how reachability prioritizes findings, and where Safeguard fits.
How to Find Vulnerabilities in Your Code
A beginner-friendly guide to finding security vulnerabilities in both your own code and the open-source libraries you depend on, using free and open tools.
NumPy Security Guide (2026)
NumPy is the numerical foundation of the Python data ecosystem — and while many of its CVEs are disputed, the pickle-based numpy.load deserialization risk is real and worth understanding.
SCA for Beginners: Understanding Software Composition Analysis
Most of your application is code you did not write. Software Composition Analysis helps you keep that borrowed code safe. Here is a beginner-friendly tour with a first scan you can run today.
Serverless Security Best Practices: Securing the Function Lifecycle
A lifecycle approach to serverless security across AWS Lambda, Azure Functions, and Cloud Functions — covering the build, deploy, invoke, and runtime phases with IAM, dependency, and event-injection controls.
Snyk vs Black Duck: A Neutral SCA Comparison for 2026
Snyk and Black Duck are both leaders in open-source security, but they optimize for different buyers — developer velocity versus license and compliance depth. A fair side-by-side, plus where a third option fits.
Understanding Dependency Trees
The libraries you install are only the tip of the iceberg. Each one pulls in its own dependencies, which pull in more, forming a tree that can run hundreds of packages deep. Understanding that tree is the first step to securing it.
Snyk Vulnerability Scanning: How the Engine Actually Works
Snyk vulnerability scanning combines a proprietary vulnerability database with dependency-graph resolution and a separate static analysis engine for code — here's how each piece actually fits together.
CVE-2015-9251: jQuery cross-domain AJAX XSS
CVE-2015-9251 lets attackers exploit jQuery's cross-domain AJAX handling to run arbitrary script. Learn affected versions, risk context, and fixes.
What Is Software Composition Analysis (SCA)?
Software Composition Analysis (SCA) identifies the open source and third-party components in your code, then flags their known vulnerabilities and license risks. Here's how SCA works and what separates modern tools from legacy scanners.
How to Run Your First Security Scan
New to security? This beginner walkthrough shows you how to run your first vulnerability scan on a real project, read the results, and know exactly what to do next.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.