vulnerability-management
Safeguard articles tagged "vulnerability-management" — guides, analysis, and best practices for software supply chain and application security.
689 articles
Triage Time Economics: Cost Per Finding
Most security teams have no idea what triage actually costs them. Here is how to calculate cost per finding and drive it down with reachability and AI.
XXE Attack Walkthroughs: What a Good Demo Actually Shows
Most XXE video walkthroughs stop at proof-of-concept file reads — here's what a genuinely useful one covers, plus the Java fix that actually closes the hole.
Use-After-Free Vulnerabilities: How They're Exploited
A use-after-free exploit turns a dangling pointer into arbitrary code execution — here's how the bug class works, why it still dominates browser and kernel CVEs, and how to catch it before release.
What is a Software Bill of Materials (SBOM)
An SBOM is a machine-readable inventory of every software component and dependency. Learn what it contains, why it matters, and how Safeguard uses it.
CycloneDX vs SPDX: SBOM Formats Compared
CycloneDX vs SPDX: how the two SBOM formats differ in vulnerability data, licensing, regulatory recognition, and conversion — and which to pick.
Reading a Scan Report: What Actually Matters
Most scan reports bury the three fields that decide whether a finding needs action today — this is how to read one without drowning in noise.
Eclipse Jetty Vulnerabilities: What to Patch and When
Jetty's HTTP/2 handling and older 9.4.x branches have carried real denial-of-service and information-disclosure CVEs — here's what a jetty 9.4.41 exploit actually looks like and which versions close it.
Prioritising CVE Patches With Reachability, Not CVSS Alone
CVSS by itself produces a queue ordered by hypothetical severity. Reachability orders by actual exposure. Mixing the two correctly is where mature programs land.
What is Software Supply Chain Security
SolarWinds, Log4Shell, and XZ Utils show why software supply chain security now spans code, dependencies, and build pipelines alike.
Zero-day vulnerabilities: what they are and how to protec...
Zero-days can't be patched before they're exploited. See how Log4Shell, MOVEit, and the XZ backdoor happened, and what real zero-day vulnerability protection requires.
Data Vulnerability Classes in Modern Applications
Most breaches trace back to a handful of recurring data vulnerability patterns — from unencrypted storage to broken access checks. Here's how to categorize and prioritize them.
How to Build Effective Remediation Steps for Security Vulnerabilities
Good remediation steps turn a scanner alert into a fix that actually ships. Here is how to structure, prioritize, and verify them.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.