vulnerability-scanning
Safeguard articles tagged "vulnerability-scanning" — guides, analysis, and best practices for software supply chain and application security.
107 articles
Website Vulnerability Assessment: A Practical How-To Guide
A website vulnerability assessment systematically finds and ranks the security weaknesses in a web app. Here is the process, the tools, and the pitfalls.
Hacking Tools Explained: What Every Defender Should Understand
A hacking tool is only as good or bad as its operator. Here is how defenders should think about the tools attackers use, and how to turn them into a defensive advantage.
DAST Meaning: What Dynamic Application Security Testing Actually Is
DAST stands for Dynamic Application Security Testing, a way of finding vulnerabilities by attacking a running application from the outside. Here is what that means in practice.
Website Security Scan: What It Checks and How to Run One
A website security scan tests a live site for common weaknesses. Here is what the different scan types actually check, how to read the results, and where the free ones fall short.
Cloud Scan: What It Is and How to Run One That Matters
A cloud scan checks your running cloud accounts, images, and code for misconfigurations and known vulnerabilities. Here is how to scope one so the results are actionable instead of overwhelming.
How a Docker Image Vulnerability Scanner Works and What to Use
How a Docker image vulnerability scanner works layer by layer, what it can and cannot catch, the tools worth knowing, and how to wire scanning into your build without slowing it down.
How to Run Grype in Offline/Airgap Environments
A hands-on tutorial for running Grype vulnerability scans in offline and airgapped environments, including vulnerability database hosting and CI integration.
Vuln Scan Basics: How Vulnerability Scanning Actually Works
What a vuln scan is, the main scanner types, how to read a report without drowning in noise, and how to fit scanning into a development pipeline.
What is Docker Security
Docker security spans image scanning, SBOMs, and runtime controls — see the CVEs, misconfigurations, and real breaches that show why each layer matters.
How to Scan Docker Images for Vulnerabilities
A production-grade vulnerability scanning pipeline for Docker images using Trivy and Grype, with reachability-based prioritization and admission enforcement.
bundler-audit Production Setup
A practical guide to running bundler-audit in production CI pipelines, including advisory database updates, exception handling, and integration with remediation workflows.
SCA vs SAST vs DAST: Which Do You Actually Need First
Three scanner acronyms, one budget. A spec-level comparison of SCA, SAST, and DAST — what each catches, what each costs to run, and the order that pays off fastest.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.