Application Security
ASVS 5.0 V6.1.2: Document Context Specific Password Words
Keep a documented list of words tied to your organization that users may not put in passwords. Level 2 guide with examples and a way to check it.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
ASVS 5.0 V6.1.1: Document Credential Stuffing Defenses
Write down how rate limits, anti automation and adaptive responses stop credential stuffing without letting attackers lock out real users. Level 1 requirement.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V5.4.3: Scan Untrusted Files for Malware
Files from untrusted sources need an antivirus scan before you serve them to anyone else. Here is a quarantine pattern with ClamAV and how to test it. Level 2.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V5.4.2: Encode Served Filenames
Filenames in headers and email attachments must be encoded under RFC 6266 so quotes, newlines and non ASCII characters cannot break structure. Level 2 guide.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V5.4.1: Control Download Filenames
Never let a user submitted filename reach your response unchecked. Validate or ignore it, and always set Content-Disposition yourself. Level 2 requirement with code and tests.
Oct 18, 20265 min read
Application Security
ASVS 5.0 V5.3.3: Stop Zip Slip When Extracting Files
Server side extraction must ignore path information supplied by the archive entries. Resolve every target, verify containment, and refuse anything that escapes.
Oct 18, 20265 min read
Application Security
ASVS 5.0 V5.3.2: Build File Paths From Trusted Data, Not Filenames
Never use a user supplied filename to build a path. Generate names yourself, or validate and canonicalize hard to stop path traversal, file inclusion and SSRF.
Oct 18, 20265 min read
Application Security
ASVS 5.0 V5.3.1: Never Execute Uploaded Files as Server Code
Files from users that land in a public folder must not run as scripts when requested. Store them outside the web root and serve them as inert data.
Oct 18, 20265 min read
Application Security
ASVS 5.0 V5.2.6: Reject Oversized Images to Stop Pixel Floods
A tiny PNG can declare a billion pixels. Check image dimensions from the header and refuse anything over your limit before decoding.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.