Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
OpenSSF Scorecard scores a repository against automated security checks and gives you a 0-10 signal for how safe a dependency is to adopt. Here is how it works and how to run it.
Nginx 1.18.0 is an unmaintained stable release with real CVEs against it. Here is which flaws are genuinely exploitable, which need specific config, and how to upgrade.
Literal SQL statement injection happens when user input is concatenated straight into a query string. Here is how the attack works and how to shut it down.
Inversion of control in JavaScript decouples your code from its dependencies, but handing over instantiation also hands over a piece of your attack surface. Here is how to get the design benefit without the security cost.
An IAM permission boundary is a ceiling on what a role or user can ever do, no matter how generous their attached policies are. Here is how to wield it without locking yourself out.
CVE-2022-45688 is a stack-overflow denial-of-service bug in the XML-to-JSON conversion path of hutool-json and org.json. Here is what triggers it and how to fix it.
CVE-2022-45146 is a use-after-free issue in Bouncy Castle's FIPS Java API that surfaces on Java 13 and later. Here is who it affects and how to remediate.
Checkmarx One is Checkmarx's cloud application security platform, bundling SAST, SCA, IaC, and more into a single console. Here is what it covers and where it fits.
The right pen testing tools depend on what you're assessing. Here's a practical map of the categories, the well-known options in each, and how they fit a defensive program.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
