web-security
Safeguard articles tagged "web-security" — guides, analysis, and best practices for software supply chain and application security.
153 articles
How to Check Website Vulnerability: A Practical Guide
To check website vulnerability properly you combine automated scanning of the running app with dependency analysis of what it's built from. Here's a workflow that covers both.
Open Redirect Vulnerabilities: How Attackers Abuse Them
An open redirect attack abuses a trusted domain's own redirect functionality to send victims to a malicious site — low severity on its own, but a key ingredient in phishing and OAuth token theft.
The OWASP Top 10, Explained: The Web App Risks That Matter Most
The OWASP Top 10 is the industry's reference list of the most critical web application security risks. Here is what each category means and how to defend against it.
Local Storage Security: What to Store and What Never To
Local storage security comes down to one rule most apps break: the browser's localStorage is readable by any JavaScript on the page, so it is no place for secrets.
JavaScript Security Issues: Common Risks and How to Fix Them
The JavaScript security issues that bite most teams are XSS, prototype pollution, vulnerable npm dependencies, and leaked secrets. Here is how each works and how to fix it.
CSP Meaning in Security: What Content Security Policy Actually Does
CSP in security stands for Content Security Policy, a browser mechanism that tells the page which sources of script, style, and other content it may trust. Here is what it means and how to use it.
Web Scanners: How They Work and What to Use
A web scanner probes a running application for vulnerabilities the way an attacker would. Here is how the different types work and how to pick one that finds real bugs.
Website Security Scanners: How a Site Scanner Works and What to Use
A site scanner crawls a live website and probes it for security issues, from missing headers to injection flaws. Here is how the scan works and how to pick one.
How to Validate a URL in JavaScript Without Opening a Hole
The modern way to validate a URL in JavaScript is the built-in URL constructor, not a regex. Here's how to use it safely on both the client and the server.
Site Security Scan: How to Check a Website for Vulnerabilities
A site security scan probes a live website for exploitable weaknesses, from injection flaws to misconfigured headers. Here is what a real scan covers and how to run one that finds something useful.
XSS Examples: Real Payloads and How They Execute
Concrete XSS examples across HTML, attribute, and JavaScript contexts, with the payloads that trigger them and why each one runs.
JavaScript Injection Attacks: Types and Prevention
JavaScript injection covers a family of attacks where untrusted input becomes executable code or markup in the browser. Here are the types and the concrete defenses for each.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.