Security
Securing Nginx on AWS: The Webinar-Grade Hardening Checklist
Running Nginx on AWS pairs two of the most common infrastructure choices, and this is the hardening walkthrough we would give in a live AWS Nginx webinar.
May 6, 20256 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
Code Search for Security: Finding Vulnerabilities Across Your Codebase
Code search is one of the fastest ways to find security bugs and leaked secrets at scale. Here is how to search effectively, what patterns to hunt for, and where it stops.
May 6, 20256 min read
Security
Choosing a Tool to Detect Security of Code: What Each Type Finds
There is no single tool to detect security of code. Here is what SAST, SCA, secret scanning, DAST, and IaC scanning each catch, and how to combine them without drowning in alerts.
May 6, 20257 min read
Security
synk.io or snyk.io? Understanding the Snyk Security Platform
People type synk.io when they mean snyk.io, the developer security company. Here is what the real platform does, why the misspelling matters for security, and how to avoid landing on the wrong site.
May 6, 20255 min read
Security
CSP Meaning in Security: What Content Security Policy Actually Does
CSP in security stands for Content Security Policy, a browser mechanism that tells the page which sources of script, style, and other content it may trust. Here is what it means and how to use it.
May 6, 20255 min read
Security
The Main Types of Security Vulnerabilities, Explained
A practical tour of the main types of security vulnerabilities developers meet, from injection and broken access control to vulnerable dependencies, with defenses for each.
May 6, 20256 min read
Security
The POJO Class in Java: A Security Guide to Plain Objects
A POJO class in Java looks harmless — just fields and getters — but the moment it becomes a deserialization target it turns into an attack surface. Here is how plain objects go wrong and how to keep them safe.
May 6, 20257 min read
Security
CVE-2023-29469: A libxml2 Hashing Flaw That Crashes XML Parsers
CVE-2023-29469 lets a crafted XML document trigger a double free in libxml2 through non-deterministic hashing of empty strings. Affected versions and fixes explained.
Apr 29, 20255 min read
Security
Ethical Hacking and Cyber Security: How They Fit Together
How ethical hacking and cyber security relate: what an ethical hacker actually does, the engagement types, the legal boundaries, and where offensive work fits in defense.
Apr 29, 20257 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.