Security Guides
How does an IAST agent attach to a Java application?
An IAST agent on Java usually attaches with the JVM's javaagent option and rewrites bytecode as classes load. Here is what that means for your deployment.
Oct 19, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What questions should you ask in an ASPM demo?
Ask an ASPM vendor to demo on your data and explain matching, ownership, priority and export. A question list with what a clear answer sounds like.
Oct 19, 20266 min read
Security Guides
How do you build the exposure window for a package incident?
To scope a bad package release, find when it was published, when it was removed, and which of your builds installed it in between. Steps for npm and PyPI.
Oct 19, 20267 min read
Security Guides
How do you list all your software before scanning for vulnerabilities?
You cannot fix what you cannot see. Learn how to build a software inventory in an afternoon: what to list, where to look, and how to keep it current.
Oct 19, 20267 min read
Security Guides
How do you run DAST against a GraphQL API?
How to run DAST against a GraphQL API: give the scanner the schema, set auth, limit depth and volume, and know what a generic scan will miss.
Oct 19, 20267 min read
Security Guides
How many test accounts does an API security test need?
At least two users for object access checks, plus one per role and an unauthenticated session. A simple account matrix you can set up before the first run.
Oct 19, 20267 min read
Security Guides
Reachability analysis or a pen test: which question does each answer?
Reachability analysis checks if your code can reach a known flaw. A penetration test tries to break in. What each answers, misses, and how they fit.
Oct 19, 202610 min read
Security Guides
Why did our SAST tool miss a vulnerability? A debugging checklist
When SAST misses a known flaw, the cause is usually coverage, build setup, framework knowledge or the type of flaw. A six step checklist to find which.
Oct 19, 20267 min read
Security Guides
Why can restarting after an outage cause a second outage?
Cold caches and a sudden surge of traffic can knock a recovering service over again. Learn the causes and a ramp up plan that avoids a second failure.
Oct 19, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.