waf
Safeguard articles tagged "waf" — guides, analysis, and best practices for software supply chain and application security.
7 articles
FortiClient EMS and FortiWeb Add Five More Confirmed-Exploited CVEs to Fortinet's Year
A SQL injection and an access-control bug in FortiClient EMS, a path traversal and command injection pair in FortiWeb — Fortinet's endpoint management and WAF products join the list.
CVE-2025-64446 in Fortinet FortiWeb: Patch Posture & SBOM Response
FortiWeb path traversal + RCE scored CVSS 9.1 and entered CISA KEV after months of targeted exploitation. Defender playbook for the WAF emergency.
Preventing SQL Injection: A Defense-in-Depth Approach
Parameterized queries stop most SQL injection, but the attacks that make it to production usually slip past a single control — here's the layered defense that catches the rest.
WAF SQL Injection Protection: What It Catches and What It Misses
A WAF can block many SQL injection attempts at the edge, but treating it as your only defense is how breaches happen. Here is what WAF SQL injection rules actually do.
SQL Injection Prevention Techniques That Actually Work
SQL injection prevention comes down to one non-negotiable technique — parameterized queries — plus a short list of layered defenses that catch what a single control misses.
Runtime Application Security Protection (RASP), Explained
Runtime application security protection instruments your app from the inside so it can block attacks in production, not just flag them in a report.
What is RASP
RASP runs inside an application and blocks attacks in real time, from the inside out. Here's how it works, how it differs from a WAF, and where it fits.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.