Security
The ZAP Security Testing Tool: A Practical Guide
How the ZAP security testing tool works as a free DAST scanner: passive and active scanning, the spider and AJAX spider, and how to run it in CI without noise.
Nov 5, 20256 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
Licence logiciel : le guide securite pour choisir et rester conforme
Une licence logiciel definit ce que vous avez le droit de faire avec un code, et mal la gerer expose autant a un risque juridique qu'a un risque securite.
Nov 5, 20256 min read
Security
CVE-2023-36414: The Azure Identity SDK RCE You Should Patch
CVE-2023-36414 is a remote code execution flaw in the Azure Identity SDK for .NET. Here is how the injection works and which version closes it.
Nov 5, 20255 min read
Security
CVE-2023-44794: The Sa-Token Authentication Bypass Explained
A path-normalization mismatch lets attackers bypass route authentication in Dromara Sa-Token. Here is how CVE-2023-44794 works and how to fix it.
Nov 4, 20255 min read
Security
How to Prevent Buffer Overflow Vulnerabilities
Preventing buffer overflow comes down to bounds-safe code, compiler and OS protections, and testing. Here is how each defense works and where it fits.
Nov 4, 20256 min read
Security
DevOps Velocity Without Sacrificing Security: How Fast Teams Stay Safe
How high-velocity DevOps teams ship daily without trading away security — the automated gates, guardrails, and metrics that let speed and safety coexist.
Nov 3, 20256 min read
Security
How to Measure DevOps Success
Measuring DevOps success means tracking delivery speed, stability, reliability, and security together, so improvement in one area doesn't quietly degrade another. Here is a practical framework.
Oct 27, 20256 min read
Security
Jest Latest Version: Upgrading Safely in 2026
The Jest latest version is 30.x, and keeping current matters less for features than for cutting the pile of transitive dev dependencies older Jest drags in.
Oct 21, 20255 min read
Security
Black Duck Software Explained: SCA, BDSA, and Independence from Synopsys
Black Duck software is one of the oldest names in software composition analysis, now an independent company again after spinning out of Synopsys in 2024. Here is what it does.
Oct 21, 20254 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.