Security Guides
How do I run my first SCA dependency scan, step by step?
A plain guide to running your first SCA dependency scan: what to scan, what to expect in the report, and how to turn the results into a short fix list.
Oct 19, 202610 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Does your cluster image list miss CronJobs and batch images?
A list of running pods misses CronJob images between runs. Here is how to find scheduled and batch images so your container scanning coverage is complete.
Oct 19, 20266 min read
Security Guides
Which business logic tests should you write by hand for an API?
Scanners miss limits like one coupon per order. Write abuse cases for single-use and capped functions and enforce them in the backend. A short method.
Oct 19, 20267 min read
Security Guides
What do you do with a finding nobody can fix yet?
No fix exists for a dependency flaw? Use time limited exceptions, compensating controls, and a review date. A repeatable way to handle unfixable findings.
Oct 19, 20266 min read
Security Guides
Why do anti-CSRF tokens break DAST scans, and how do you fix it?
Why do DAST scans fail on forms with anti-CSRF tokens? Single-use tokens reject replayed requests. Learn how scanners handle them and how to check yours.
Oct 19, 20267 min read
Security Guides
Does the CWE Top 25 tell you which SAST findings to fix first?
It helps, but it is a starting point. Combine the CWE Top 25 and its KEV column with exposure, confidence and fix effort to order a SAST backlog.
Oct 19, 20267 min read
Security Guides
How does ASPM route findings to the right team?
ASPM routes findings using code owners files, repository maps and service catalogs. How routing works, where it fails, and how to fix bad ownership data.
Oct 19, 20266 min read
Security Guides
How Do Bulk Fix Pull Requests Work Across Many Repositories?
How bulk fix pull requests work: one change per repository, how to order them, how to handle review load, and how to keep a large cleanup under control.
Oct 19, 20268 min read
Security Guides
Are SAST, static code analysis and source code analysis the same?
Mostly yes. SAST, static code analysis and source code analysis name the same idea: checking non-running code for flaws. Here is where the labels differ.
Oct 19, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.