Security Guides
What is virtual patching, and when does it help in a zero-day?
Virtual patching blocks exploitation of a known flaw without changing the code. What it is, when it helps in a zero-day, and where it falls short.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What is the OWASP Web Security Testing Guide and how do you use it?
The OWASP Web Security Testing Guide is a testing resource for web apps. What it is, what version is current, and how to use it with a practice target.
Oct 18, 20263 min read
Security Guides
What is the GitLab vulnerability report and how do you triage in it?
The GitLab vulnerability report lists confirmed findings on the default branch. Learn the statuses, filters, actions and a simple triage routine.
Oct 18, 20263 min read
Security Guides
What is the CISA KEV catalog and why should leaders care?
The KEV catalog lists flaws known to be exploited in real attacks. Leaders can use it as a short, evidence based list to ask engineering about.
Oct 18, 20263 min read
Security Guides
What is the CISA KEV catalog, and how should beginners use it?
The KEV catalog lists vulnerabilities known to be exploited in the wild. What an entry contains, how it differs from severity, and a simple way to use it.
Oct 18, 20263 min read
Security Guides
What is session fixation and how do you test for it?
Session fixation happens when a session ID stays the same across login. How the attack works, a four step test, and the fix that scanners look for.
Oct 18, 20264 min read
Security Guides
What is secret zero, and how do you solve the bootstrap problem?
Secret zero is the first credential an app needs to reach a secrets manager. Learn why it exists and the options for shrinking or removing it.
Oct 18, 20263 min read
Security Guides
What is OWASP Cornucopia and how do teams use it for training?
OWASP Cornucopia is a card game that helps agile teams find application security requirements. How a session runs, who to invite and where it falls short.
Oct 18, 20263 min read
Security Guides
What memory safety means: spatial and temporal bugs explained
Memory safety means a program cannot read, write or reuse memory it should not. Here are the two bug families, spatial and temporal, with plain examples.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.