AppSec
XSS Attack Examples: How Cross-Site Scripting Works and How to Stop It
Walk through realistic XSS attack examples across the three main flavors of cross-site scripting, then see how to detect and remediate each one.
Apr 4, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAppSec
SCA Vulnerabilities: How to Find and Fix Them in Your Dependencies
SCA vulnerabilities are known security flaws in the open-source packages your app pulls in. Here is how to detect them, cut the noise, and fix the ones that matter.
Apr 4, 20267 min read
AppSec
Open Redirect Vulnerabilities: What They Are and How to Fix Them
An open redirect vulnerability fix is usually a ten-line change, but the bug keeps shipping because redirects hide in login flows, tracking links, and OAuth callbacks. Here is how to find and close them.
Apr 4, 20267 min read
AppSec
Free Website Vulnerability Scanners: What You Actually Get
Free scanners catch the obvious stuff — missing headers, expired TLS, a handful of known CVEs — but they stop well short of what a real security program needs.
Apr 4, 20265 min read
AppSec
Finding Vulnerabilities in Source Code: A Practical Method
A concrete, repeatable method for finding vulnerabilities in source code — combining static analysis, dependency scanning, and manual review without drowning your team in false positives.
Apr 4, 20267 min read
AppSec
How to Scan Websites for Security Issues
A practical walkthrough of how to scan websites for common vulnerabilities, which tools fit which job, and how to turn scan output into fixes.
Apr 3, 20266 min read
AppSec
What a WhiteSource Scan Actually Checks (and How Mend Changed It)
A WhiteSource scan is a software composition analysis run that inventories your open source dependencies and flags known vulnerabilities and license risks. Here is what it looks at and how the Mend rebrand affects your pipeline.
Apr 3, 20266 min read
AppSec
org.owasp.esapi: What the OWASP ESAPI Library Is and How to Use It Safely
org.owasp.esapi is the Maven coordinate for OWASP ESAPI, a Java security control library. Here is what it does, where it still helps, and the CVEs to watch.
Apr 2, 20266 min read
AppSec
What Is the NVD (National Vulnerability Database)?
The NVD is the U.S. government's repository of analyzed vulnerability data, built on top of the CVE program — here's what it actually adds, how CVE and NVD relate, and where its data comes from.
Apr 2, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.