Security
How to Learn Hacking: An Ethical Hacker's Roadmap
A practical, legal path into offensive security — the fundamentals to build first, the labs to practice on, and how to turn curiosity into a defensible skill set.
Jun 24, 20257 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
Snyk the Company: Who They Are, What They Build, and How to Weigh Them
Snyk is a developer-security company founded in 2015, best known for open-source dependency scanning. Here is an honest look at the company, its products, and how to evaluate whether it fits your stack.
Jun 24, 20256 min read
Security
Application Security Vulnerabilities: What They Are and How to Fix Them
Application security vulnerabilities are the flaws in your code, dependencies, and configuration that attackers exploit. This guide covers the common classes and how to find and fix them.
Jun 24, 20256 min read
Security
CVE-2022-42004: The jackson-databind DoS Explained
CVE-2022-42004 is a denial-of-service flaw in jackson-databind where deeply nested arrays exhaust resources during deserialization. Here is who is affected and how to fix it.
Jun 22, 20255 min read
Security
jest-junit: Secure CI Test Reporting for Jest
jest-junit turns Jest test results into JUnit XML that CI systems can read. Here is how to configure it and keep the reporting pipeline free of security surprises.
Jun 22, 20256 min read
Security
True Positive in Cyber Security: What It Means and Why It Matters
A true positive is a real alert about a real threat. Understanding it alongside false positives, true negatives, and false negatives is how you judge whether a security tool is any good.
Jun 20, 20256 min read
Security
dom-to-image-more: Using the DOM-to-Image Fork Safely
dom-to-image-more turns a DOM node into a PNG, JPEG, or SVG in the browser. What the fork fixes, and the security considerations when rendering user content.
Jun 19, 20255 min read
Security
How to Choose an Application Security Company
What an application security company actually does, the categories of vendors, and the questions that separate real coverage from a dashboard full of noise.
Jun 19, 20257 min read
Security
Which Ethical Hacking Tools Should Your Security Team Actually Use?
Ethical hacking tools help defenders find weaknesses before attackers do. Here is a practitioner's map of the categories, the well-known tools in each, and how to use them responsibly.
Jun 18, 20256 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.