Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (521)AI Security (779)Vulnerability Analysis (568)Security (521)DevSecOps (494)Application Security (480)Open Source Security (406)AppSec (306)Compliance (301)Industry Analysis (294)Container Security (284)Best Practices (252)Open Source (252)Cloud Security (239)Buyer's Guides (216)Software Supply Chain Security (175)Regulatory Compliance (138)Incident Analysis (137)Vulnerability Management (133)Security Guides (124)Concepts (116)Containers (100)Supply Chain Attacks (92)SBOM (76)Vulnerabilities (71)Product (69)Threat Intelligence (64)Supply Chain Security (55)Supply Chain (55)Infrastructure Security (52)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Licensing (26)Tutorials (24)Engineering (24)Ransomware (24)Kubernetes Security (22)Guides (22)SecOps (21)Vulnerability Guides (20)Regulation (20)Industry Guides (19)Case Studies (18)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Threat Research (16)Agent Security (16)Vulnerability Response (16)Risk Management (16)Tool Reviews (16)Compliance & Frameworks (15)Identity Security (15)Cryptography (15)Security Concepts (15)Incident Response (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Career (10)Enterprise (9)Culture (9)Strategy (8)Company (8)Standards (8)Architecture (8)Industry Insights (7)Industry Trends (7)Secure Development (7)How-To Guide (7)Zero-Day Exploits (7)Network Security (7)Dependency Management (7)Industry (6)Vendor Comparison (6)Research (6)Dev Practices (6)Security Operations (6)Organizational Security (6)Developer Security (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Tool Comparison (4)Mobile Security (4)Product Launch (4)Policy (4)Offensive Security (4)Tool Comparisons (4)Healthcare Security (3)Social Engineering (3)Build Security (3)Governance (3)Vulnerability Research (3)Regional Security (3)Policy & Compliance (3)SBOM Standards (3)Software Supply Chain (3)Analysis (3)Startup Security (3)Hardware Security (3)Zero-Day Analysis (2)Industry News (2)Release (2)SBOM and Compliance (2)Security Management (2)Threat Actors (2)API Security (2)Security Architecture (2)Security Culture (2)DeFi Security (2)Incident Postmortem (1)Technical (1)Healthcare (1)Events (1)Product Update (1)Language Security (1)Emerging Threats (1)Privacy (1)Lifecycle Management (1)Career Development (1)Tools & Platforms (1)Threat Modeling (1)Browser Security (1)Threat Analysis (1)Business Continuity (1)Runtime Security (1)Credential Attacks (1)PKI Security (1)Architecture Security (1)Nation-State Threats (1)Tools & Techniques (1)Privacy & Security (1)

Articles

RSS feed
Security

flask-security-too: What It Is and How to Use It Securely

flask-security-too is the maintained successor to Flask-Security, giving Flask apps authentication, roles, and account features out of the box. Here is what it provides and how to configure it safely.

Apr 22, 20255 min read
Security

Updating Ruby on a Mac: A Safe, Security-Minded Guide

The Ruby that ships with macOS is old and there for the system, not you. Here is how to install and update Ruby on a Mac, including Apple Silicon, without breaking anything.

Apr 22, 20255 min read
Security

XXE Example in Java: How the Attack Works and How to Stop It

A concrete XXE example in Java showing why default XML parsers are dangerous, what an attacker can read, and the exact parser configuration that shuts it down.

Apr 22, 20255 min read
Security

jQuery UI Latest Version: Where It Stands and What to Do About It

The jQuery UI latest version is in the 1.14.x line, released in 2024, and the project is now in maintenance mode. Here is what that means for your dependency and its security.

Apr 22, 20255 min read
Security

Does a Code Quality Tool Actually Make Your Software More Secure?

A code quality tool and a security scanner overlap more than teams realize. Here is where quality gates catch real vulnerabilities and where you still need dedicated AppSec tooling.

Apr 22, 20256 min read
Security

DNS Vulnerabilities: The Attacks That Target the Internet's Address Book

A DNS vulnerability lets an attacker forge, intercept, or redirect the name lookups your systems depend on. Here are the main classes and how to defend against them.

Apr 21, 20256 min read
Security

Peter McKay and Snyk: What His Tenure Says About Developer Security

Peter McKay led Snyk through its hypergrowth years as CEO. Here is what his tenure reveals about the developer-first security market and how to evaluate the tools it produced.

Apr 18, 20255 min read
Security

Mend Security Explained: What Mend.io Does and How It Works

A clear look at Mend security: what the platform formerly known as WhiteSource covers, how its automated remediation works, and where its strengths and gaps lie.

Apr 17, 20255 min read
Security

How to Implement Shift Left Testing Without Slowing Delivery

Shift left testing means moving quality and security checks earlier, into design and coding, instead of leaving them until the end. Here is a practical way to implement it.

Apr 17, 20257 min read
Page 38 of 58

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

Blog — security (Page 38) | Safeguard — Software Supply Chain Security Insights