web-security
Safeguard articles tagged "web-security" — guides, analysis, and best practices for software supply chain and application security.
151 articles
How to Check a Website for Vulnerabilities: A Practical Guide
A hands-on walkthrough of how to check a website for vulnerabilities, from passive header checks to authenticated dynamic scanning, and how to read the results.
What Is a Cross-Site Request Forgery Vulnerability?
A cross-site request forgery vulnerability tricks a logged-in user's browser into sending unwanted requests. Here is how it works and how to shut it down.
Website Vulnerability Assessment: A Practical How-To Guide
A website vulnerability assessment systematically finds and ranks the security weaknesses in a web app. Here is the process, the tools, and the pitfalls.
DAST Meaning: What Dynamic Application Security Testing Actually Is
DAST stands for Dynamic Application Security Testing, a way of finding vulnerabilities by attacking a running application from the outside. Here is what that means in practice.
SSRF Full Form: What Server-Side Request Forgery Means
The SSRF full form is Server-Side Request Forgery, a vulnerability where an attacker tricks your server into making requests on their behalf. Here is what that means and how to defend against it.
Website Security Scan: What It Checks and How to Run One
A website security scan tests a live site for common weaknesses. Here is what the different scan types actually check, how to read the results, and where the free ones fall short.
URL Encoding and Decoding in Java: URLEncoder and URLDecoder
How URLEncoder.encode in Java actually behaves, why it turns spaces into plus signs, the Charset overload you should be using, and where hand-rolled encoding turns into an injection bug.
DOM-Based XSS Attacks: How They Work and How to Prevent Them
A DOM based XSS attack executes entirely in the browser, which is why your server-side filters and access logs never see it. Here is how the source-to-sink flow works and what actually stops it.
SQL Injection Example: How It Works and How to Stop It
A clear SQL injection example makes the vulnerability obvious. Here are illustrative cases, the main attack types, and the fixes that actually eliminate the risk.
SSRF Attacks: How Server-Side Request Forgery Works
SSRF tricks a server into making requests an attacker controls — reaching internal services, cloud metadata endpoints, and data no external user should touch. Here is how it works and how to stop it.
A CSRF Example: Full Attack Walkthrough
A concrete csrf example — a bank transfer form with no anti-forgery token — showing exactly how a forged request rides in on a victim's session and what stops it.
XSS Scripting Attacks: A Refresher for Engineers
XSS scripting attacks still make the OWASP Top 10 more than two decades after they were first documented, mostly because the fix is context-dependent and easy to get almost-right.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.