secure-coding
Safeguard articles tagged "secure-coding" — guides, analysis, and best practices for software supply chain and application security.
188 articles
Code Quality Software and Security: Where Clean Code and Safe Code Overlap
Code quality software catches more security bugs than most teams give it credit for. Here is how quality tooling and security tooling overlap, where they diverge, and how to combine them.
What Is a Code Checker? A Security-Focused Guide
A code checker analyzes source for bugs, style issues, and security flaws before they ship. Here is how the security-relevant ones work, with a focus on Java.
Dependency Injection in JavaScript: Security Notes
Dependency injection in JavaScript makes code testable and modular, but the same indirection that helps design can hide security bugs if you're not careful about what gets injected.
Code Injection in Python: How It Happens and How to Prevent It
Code injection python vulnerabilities almost always trace back to eval, exec, or a template engine handed untrusted input; here is how the attack works and how to close it off.
The Benefits of Rust: A Security Guide for Practitioners
Rust's biggest benefit is that it eliminates whole classes of memory-safety bugs at compile time. Here is what that means for security teams and where the limits are.
Statische Code-Analyse: Sicherheitsluecken finden, bevor Code laeuft
Statische Code-Analyse prueft Quellcode ohne ihn auszufuehren und findet Sicherheitsluecken frueh. So funktioniert sie und welche Tools sich lohnen.
OWASP Training: How to Actually Run It for a Dev Team
OWASP training only sticks when it's tied to the vulnerabilities your own codebase actually has, not a generic slide deck run once a year.
Application Development Security: Building It Into the SDLC
Application development security only works when it's built into the software development lifecycle from the first commit, not bolted on before a release deadline.
Advanced Python: The Security-Focused Patterns Senior Developers Should Master
Advanced Python is not about clever one-liners. The patterns that separate senior engineers are the ones that keep code safe: safe deserialization, controlled subprocess calls, and disciplined dependency use.
What Is Wrong With This Code? A Security Review Checklist
When you ask what is wrong with this code, the answer is often not a crash but a security flaw hiding in plain sight. Here is a practitioner's checklist for spotting the bugs that bite later.
SQL Injection Prevention Cheat Sheet
A practitioner's SQL injection cheatsheet: parameterized queries, safe ORM use, input validation, least privilege, and the exact patterns to ban in review.
SAST Scans Explained: How Static Analysis Finds Code Flaws
SAST scans read your source code without running it, tracing untrusted data from input to sink to catch injection and other flaws before they ship.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.