Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (3306)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1716)Supply Chain (1423)Industry Analysis (1005)Supply Chain Security (1005)Research (585)Security (532)DevSecOps (511)Product (472)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (73)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Tool Reviews (16)Agent Security (16)Risk Management (16)Threat Research (16)Vulnerability Response (16)Cryptography (15)Incident Response (15)Security Concepts (15)Compliance & Frameworks (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Security News (10)Career (10)Culture (9)Company (9)Enterprise (9)Vulnerability Research (8)Standards (8)Architecture (8)Strategy (8)Industry Insights (7)How-To Guide (7)Network Security (7)Industry Trends (7)Dependency Management (7)Zero-Day Exploits (7)Secure Development (7)Security Operations (6)Organizational Security (6)Vendor Comparison (6)Developer Security (6)Industry (6)Dev Practices (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Offensive Security (4)Product Launch (4)Tool Comparisons (4)Policy (4)Mobile Security (4)Social Engineering (3)Hardware Security (3)Healthcare Security (3)Startup Security (3)Build Security (3)API Security (3)Governance (3)Regional Security (3)Analysis (3)Policy & Compliance (3)Security Management (2)Security Architecture (2)SBOM Standards (2)SBOM and Compliance (2)Industry News (2)DeFi Security (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Data Security (1)Events (1)Tools & Platforms (1)Tools & Techniques (1)Architecture Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)Healthcare (1)PKI Security (1)Threat Modeling (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Emerging Threats (1)Product Update (1)Nation-State Threats (1)Lifecycle Management (1)Credential Attacks (1)Runtime Security (1)Privacy (1)Threat Analysis (1)Technical (1)Language Security (1)Privacy & Security (1)Business Continuity (1)

Articles

RSS feed
Application Security

ASVS 5.0 V1.4.3: Release Memory and Clear Dangling Pointers

ASVS 5.0 V1.4.3 (Level 2) asks you to free allocated resources and null out references so use after free bugs cannot happen. How to build and test it.

Oct 18, 20263 min read
Application Security

ASVS 5.0 V1.4.2: Prevent Integer Overflows With Range Checks

ASVS 5.0 V1.4.2 (Level 2) requires sign, range and input validation so integer overflows cannot corrupt memory or business math. Code and tests inside.

Oct 18, 20263 min read
Application Security

ASVS 5.0 V1.4.1: Use Memory Safe Strings and Copies

ASVS V1.4.1 requires memory safe strings, safer copies and careful pointer use to stop overflows. See unsafe versus safe C code and how to test with sanitizers.

Oct 18, 20265 min read
Application Security

ASVS 5.0 V1.3.9: Sanitize Content Sent to Memcache

ASVS V1.3.9 requires sanitizing content before it reaches memcache. Learn how CRLF in keys enables command injection and how to stop it.

Oct 18, 20262 min read
Application Security

ASVS 5.0 V1.3.8: Prevent JNDI Injection in Java

ASVS V1.3.8 requires sanitizing input used in JNDI lookups and configuring JNDI securely. See the settings and a test that catches remote lookups.

Oct 18, 20262 min read
Application Security

ASVS 5.0 V1.3.7: Never Build Templates From User Input

ASVS V1.3.7 forbids building templates from untrusted input. See the vulnerable pattern in Jinja2 and Node, the safe fix, and how to test for SSTI.

Oct 18, 20264 min read
Application Security

ASVS 5.0 V1.3.6: Block SSRF With Strict Allowlists

ASVS V1.3.6 requires allowlisting protocols, domains, paths and ports before server side requests. See a safe fetch helper and a test plan for SSRF.

Oct 18, 20265 min read
Application Security

ASVS 5.0 V1.3.5: Sanitize Markdown, CSS and Template Content

ASVS V1.3.5 requires sanitizing or disabling user supplied Markdown, CSS, XSL and BBCode. See safe renderer settings and tests for each format.

Oct 18, 20263 min read
Application Security

ASVS 5.0 V1.3.4: Sanitize User Supplied SVG Files

ASVS V1.3.4 requires SVG uploads to be reduced to safe tags and attributes. Learn why SVG is code, how to sanitize it, and how to test uploads.

Oct 18, 20263 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.