Vulnerabilities
XSS Examples: Real Payloads and How They Execute
Concrete XSS examples across HTML, attribute, and JavaScript contexts, with the payloads that trigger them and why each one runs.
Apr 18, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
jQuery UI Latest Version: Where It Stands and What to Do About It
The jQuery UI latest version is in the 1.14.x line, released in 2024, and the project is now in maintenance mode. Here is what that means for your dependency and its security.
Apr 18, 20265 min read
Cloud Security
Agentless vs. Agent-Based Security & Monitoring
Agentless vs agent-based security compared: how Aqua Security's runtime Enforcer model differs from Safeguard's pipeline-native supply chain scanning.
Apr 18, 20269 min read
Security
Does a Code Quality Tool Actually Make Your Software More Secure?
A code quality tool and a security scanner overlap more than teams realize. Here is where quality gates catch real vulnerabilities and where you still need dedicated AppSec tooling.
Apr 18, 20266 min read
Security
DNS Vulnerabilities: The Attacks That Target the Internet's Address Book
A DNS vulnerability lets an attacker forge, intercept, or redirect the name lookups your systems depend on. Here are the main classes and how to defend against them.
Apr 18, 20266 min read
DevSecOps
DevSecOps Tools Comparison 2025: Choosing the Right Stack
The DevSecOps tooling landscape has exploded. From SAST to SCA to SBOM management, this guide compares the major categories and helps you build a coherent security toolchain.
Apr 18, 20266 min read
Cloud Security
Cloud Detection and Response (CDR) / EDR vs. CDR
CDR catches bad behavior in running cloud workloads. Safeguard secures what gets built before it ever runs. A concrete look at how the two layers — and Aqua Security's CDR — actually differ.
Apr 18, 20268 min read
Product
Safeguard Portal Deep Dive: Navigating the Security Dashboard
A comprehensive walkthrough of the Safeguard portal, covering every panel, metric, and workflow that security teams use daily to manage software supply chain risk.
Apr 18, 20267 min read
Security
Peter McKay and Snyk: What His Tenure Says About Developer Security
Peter McKay led Snyk through its hypergrowth years as CEO. Here is what his tenure reveals about the developer-first security market and how to evaluate the tools it produced.
Apr 18, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.