Application Security
ASVS 5.0 V6.3.5: Notify Users of Suspicious Sign Ins
Alert users about unusual or partially successful authentication attempts so they can react. Level 3 guide with detection rules, code and tests.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
ASVS 5.0 V6.3.4: No Undocumented Authentication Paths
Every way into the app must be documented and enforce the same controls. Hunt for forgotten routes. Level 2 guide with route audit code and tests.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V6.3.3: Require Multiple Authentication Factors
Access needs multi factor authentication or a combination of single factors. At Level 3, one factor must be phishing resistant hardware. Level 2 guide.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V6.3.2: Remove or Disable Default Accounts
Accounts such as admin, root or sa must not exist in the shipped application, or must be disabled. Level 1 guide with checks, tests and mistakes.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V6.3.1: Enforce Credential Stuffing Controls
Implement the rate limits and anti automation your security documentation promises, and test that they hold. Level 1 guide with code and test steps.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V6.2.9: Allow Passwords of 64 Characters or More
Permit passphrases of at least 64 characters. Set a high upper bound only to prevent abuse. Level 2 guide with limits, tests and server settings.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V6.2.8: Verify Passwords Exactly as Received
Do not truncate, trim or case fold a password before you verify it. Hash what the user typed. Level 1 guide with code, test cases and bcrypt pitfalls.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V6.2.7: Allow Paste and Password Managers
Never block paste or autofill on password fields. Password managers make users safer. Level 1 guide with markup, tests and the mistakes to remove.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V6.2.6: Mask Password Fields
Use type=password for password inputs, with an optional show toggle. A tiny Level 1 control that stops shoulder surfing and screen sharing leaks.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.