Application Security
ASVS 5.0 V11.2.2: Design for Crypto Agility
ASVS V11.2.2 requires that algorithms, key sizes and keys can be swapped without a rewrite. Versioned envelopes, config driven choices and a re encryption path.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
ASVS 5.0 V11.2.1: Use Validated Crypto Libraries Only
ASVS V11.2.1 requires industry validated cryptographic implementations. Never write your own, pick maintained libraries, and keep them patched. With code and a test.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V11.1.4: Plan Your Crypto Migration Path
ASVS V11.1.4 wants a maintained crypto inventory plus a documented plan to move to new standards such as post quantum cryptography. A practical way to start.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V11.1.3: Discover Every Use of Cryptography
ASVS V11.1.3 requires discovery tooling that finds every encryption, hashing and signing operation in your system. How to automate it and verify the results.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V11.1.2: Build a Cryptographic Inventory
ASVS V11.1.2 requires a maintained inventory of every key, algorithm and certificate, with rules on where each may be used. A simple format and a test.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V11.1.1: Write a Key Management Policy
ASVS V11.1.1 asks for a documented key lifecycle that follows a standard like NIST SP 800-57 and keeps keys from being overshared. Here is what to write and how to prove it.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V10.7.3: Let Users Review, Change and Revoke Consents
Users should be able to see every app they have authorized, narrow what each can do, and revoke it. Design, code and checks for a consent management page.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V10.7.2: Make the Consent Screen Clear and Specific
A consent prompt must say what is being granted, to which app, and for how long. Here is what to show and how to check it.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V10.7.1: Get User Consent for Each Authorization Request
The authorization server must make sure the user consents to every authorization request, and always prompt when the client's identity cannot be assured.
Oct 18, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.