Container Security
Container Registry Scanning
How container registry scanning actually works, why Aqua's Trivy isn't enough on its own, what the xz-utils backdoor exposed, and how Safeguard prioritizes findings that matter.
Apr 16, 20268 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
What a Code Fixer Really Does: A Security Guide
A code fixer promises to find and repair bugs automatically, but for security work the details matter. Here is how to use one without introducing new risk.
Apr 16, 20266 min read
Application Security
Dynamic Application Security Testing (DAST)
DAST tests running apps like an attacker would. Learn how it works, what it catches and misses, and how PCI DSS 4.0 now mandates it.
Apr 16, 20267 min read
Open Source
immer npm: A Security Review and Safe Usage Guide
The immer npm package makes immutable state updates painless, but its older versions carried prototype pollution flaws. Here is its security history and how to depend on it safely.
Apr 16, 20266 min read
Container Security
Docker CIS Benchmark
A practical breakdown of the Docker CIS Benchmark's 100+ controls, the checks teams fail most, how Aqua Security handles compliance, and what audit failures actually cost.
Apr 16, 20267 min read
SecOps
True Positives vs False Positives in Cyber Security
A true positive is a real finding your tools caught correctly; a false positive is noise that looks like a finding but isn't — and the ratio between them decides whether your security program gets trusted or ignored.
Apr 15, 20266 min read
AppSec
LDAP Injection Attacks: How They Work and How to Prevent Them
LDAP injection lets an attacker manipulate directory-service queries by inserting special filter characters into user input, often bypassing authentication entirely — here's how the attack works and how to stop it.
Apr 15, 20266 min read
Containers
Dockerfile Best Practices: Security, Size, and Build Speed
Most Dockerfiles are copy-pasted from a tutorial and never revisited. Here's what actually shrinks image size, closes the common security holes, and speeds up rebuilds.
Apr 15, 20265 min read
AppSec
SAST and DAST Full Form: What the Acronyms Actually Mean
The SAST and DAST full form is Static and Dynamic Application Security Testing. Here is what each one does, where they differ, and when to use both.
Apr 15, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.