Application Security
What is Dynamic Code Analysis
Dynamic code analysis tests running applications to catch exploitable vulnerabilities that static scans and manifest files alone can easily miss.
Feb 7, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
React Native Security Considerations for Mobile Supply Chains
React Native introduces unique security challenges at the intersection of JavaScript and native mobile code. Understanding these risks is essential for securing cross-platform mobile applications.
Feb 7, 20267 min read
Cloud Security
How to set up cloud security posture management (CSPM)
A practical, step-by-step guide to setting up cloud security posture management: inventory, tool selection, policy tuning, alerting, remediation, and verification.
Feb 7, 20267 min read
Infrastructure Security
Pulumi and Crossplane Security: IaC Beyond Terraform
Security considerations for Pulumi and Crossplane as infrastructure-as-code alternatives, including unique risks and hardening strategies.
Feb 7, 20267 min read
Best Practices
What is Threat Detection
Threat detection means spotting active attacks before they succeed. See real dwell-time data, CVE examples, and detection metrics that matter.
Feb 7, 20266 min read
Software Supply Chain Security
Dependency Hijacking Prevention: A Comprehensive Guide
Dependency hijacking encompasses multiple attack techniques that redirect dependency resolution to attacker-controlled packages. This guide covers all major hijacking vectors and their countermeasures.
Feb 7, 20265 min read
Cloud Security
How to configure network ACLs in AWS VPC
A step-by-step guide to configure AWS NACLs correctly — creating rules, associating subnets, and verifying traffic — for real defense-in-depth in your VPC.
Feb 7, 20267 min read
Secure Development
Deno Security Model Advantages: Runtime Permissions Done Right
Deno requires explicit permission grants for file, network, and environment access. This capability-based model changes the supply chain risk equation.
Feb 6, 20265 min read
Container Security
Container Escape Techniques in 2023: What's Changed and What Hasn't
Container escapes remain a real threat in multi-tenant environments. A look at the latest techniques, CVEs, and defenses as container security matures in 2023.
Feb 6, 20265 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.