Application Security
How to implement OAuth 2.0 securely
A step-by-step guide to implementing OAuth 2.0 securely: PKCE, redirect URI validation, token storage, and the vulnerabilities to avoid.
Feb 10, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
How to set up API rate limiting
A practical, step-by-step guide to setting up API rate limiting — gateway and app-layer configs, algorithm choices, per-endpoint tuning, and how to verify it actually blocks abuse.
Feb 10, 20267 min read
Application Security
What is Static Code Analysis
Static code analysis scans source code for flaws before it runs. Here's how SAST works, what it catches, and where it falls short without reachability context.
Feb 7, 20266 min read
Application Security
What is Dynamic Code Analysis
Dynamic code analysis tests running applications to catch exploitable vulnerabilities that static scans and manifest files alone can easily miss.
Feb 7, 20267 min read
Application Security
What is Secure by Design
Secure by Design turns CISA's 2023 guidance and pledge into concrete practice: memory-safe code, no default passwords, and verifiable SBOMs over marketing claims.
Feb 6, 20267 min read
Application Security
What is Secure by Default
Secure by default means software ships in its safest state out of the box. See real breaches, standards, and pledges driving this shift.
Feb 6, 20266 min read
Application Security
What is Risk-Based Vulnerability Prioritization
CVSS alone can't sort 40,000 CVEs a year. Learn how reachability, EPSS, and KEV data cut real risk from noise.
Feb 5, 20266 min read
Application Security
What is a False Positive in Security Scanning
False positives waste security team hours flagging vulnerabilities that aren't actually exploitable. Here's how to spot, measure, and reduce them.
Feb 5, 20267 min read
Application Security
What is Noise Reduction in AppSec Tooling
Most AppSec scans return thousands of findings, but under 5% are ever reachable in production. Here's how noise reduction actually works.
Feb 5, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.