Security Guides
Memory safety in the 2025 CWE Top 25: three entries to know
Out-of-bounds write, use after free and out-of-bounds read all sit in the top ten of the 2025 CWE Top 25. What each means and how to fix it.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How to measure what an SCA tool misses using seeded packages
Estimate false negatives in a software composition tool by planting known vulnerable dependencies in a test repository and counting what it reports.
Oct 18, 20263 min read
Security Guides
How does MCUboot stop a downgrade to an older, vulnerable firmware?
MCUboot has test swaps that revert, version checks in overwrite mode, and a hardware security counter. What each stops and where each falls short.
Oct 18, 20263 min read
Security Guides
What does the licenses element in a Maven POM actually tell you?
The Maven POM licenses element lists the project's own license by name and URL. It does not cover dependencies, and the name is free text. What to do next.
Oct 18, 20263 min read
Security Guides
Does Maven dependency scope change which scan findings matter?
Test and provided scopes are not transitive and may never ship. See how Maven scope should shape which vulnerability scan findings you treat as urgent.
Oct 18, 20263 min read
Security Guides
Should I remove unused Maven dependencies to cut security risk?
Maven's dependency:analyze finds declared but unused and used but undeclared libraries. Use it to shrink attack surface, but check false positives first.
Oct 18, 20263 min read
Security Guides
What is mass assignment, and how do you catch it in code review?
Mass assignment lets a request set fields the form never showed. Catch it by looking for model binding without a field allow list, and ask for DTOs.
Oct 18, 20264 min read
Security Guides
Masking, row level security or column grants: which one to use
Three ways to limit what analysts see in a warehouse. A decision guide for choosing between dynamic masking, row policies and plain column grants.
Oct 18, 20264 min read
Security Guides
How do you map which vendors hold your customers' data?
Trace each data type from where it enters to every system and supplier it reaches. Four steps and a simple table to record who holds what, where and why.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.