Security
Using Checkmarx for Salesforce Apex Security: A Practical Guide
Checkmarx can scan Salesforce Apex and Visualforce for SOQL injection, XSS, and CRUD/FLS gaps. Here is how the pairing works and what to watch for.
May 27, 20255 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
What Is PII? A Security and Compliance Guide to Personally Identifiable Information
PII is any data that can identify a specific person. Here is how to classify it, where it leaks in software systems, and what regulators expect you to do about it.
May 27, 20256 min read
Security
The Most Common Software Vulnerabilities and How to Prevent Them
The handful of common software vulnerabilities that keep showing up in real breaches, why they persist, and the concrete practices that shut each one down.
May 27, 20256 min read
Security
Web Application Security Assessment: How to Actually Test Your App
A web application security assessment is a structured evaluation of an app's exposure across code, dependencies, configuration, and runtime behavior. Here is how to run one that finds real issues.
May 27, 20256 min read
Security
What Is Checkmarx One? A Practical Look at the AppSec Platform
Checkmarx One is Checkmarx's cloud application security platform, bundling SAST, SCA, IaC, and more into a single console. Here is what it covers and where it fits.
May 27, 20255 min read
Security
CVE-2022-45146: Bouncy Castle FIPS Use-After-Free Explained
CVE-2022-45146 is a use-after-free issue in Bouncy Castle's FIPS Java API that surfaces on Java 13 and later. Here is who it affects and how to remediate.
May 27, 20255 min read
Security
CVE-2022-45688: The Hutool JSON Stack Overflow, Explained
CVE-2022-45688 is a stack-overflow denial-of-service bug in the XML-to-JSON conversion path of hutool-json and org.json. Here is what triggers it and how to fix it.
May 27, 20255 min read
Security
What Is an IAM Permission Boundary and When to Use One
An IAM permission boundary is a ceiling on what a role or user can ever do, no matter how generous their attached policies are. Here is how to wield it without locking yourself out.
May 27, 20255 min read
Security
Inversion of Control in JavaScript: The Security Angle Nobody Explains
Inversion of control in JavaScript decouples your code from its dependencies, but handing over instantiation also hands over a piece of your attack surface. Here is how to get the design benefit without the security cost.
May 27, 20255 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.