Vulnerability Analysis
Text4Shell RCE in Apache Commons Text CVE-2022-42889
CVE-2022-42889 (Text4Shell) is a 9.8-severity RCE in Apache Commons Text 1.5-1.9. Learn affected versions, timeline, and remediation steps.
May 6, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDevSecOps
Azure DevOps Pipeline Supply Chain Hardening 2026
A 2026 hardening guide for Azure DevOps Pipelines: service connections, workload identity federation, approval gates, agent isolation, and SLSA integration.
May 6, 20265 min read
AI Security
AI Cybersecurity Tools and Solutions: The 2026 Landscape
AI cybersecurity tools in 2026 split into three real categories — AI-augmented detection, AI-specific application security, and autonomous response — and most vendors only actually cover one.
May 6, 20265 min read
AppSec
Gartner DAST: How Analysts Frame Dynamic Application Security Testing
Gartner does not publish a standalone DAST ranking; it covers dynamic testing inside its broader application security testing research. Here is how analysts categorize DAST and what to take from it.
May 6, 20266 min read
AI Security
AI Code Security Solutions: What to Evaluate Before Buying
AI code security solutions range from AI-assisted scanning to AI-generated fixes — here's what to actually test before trusting one with your pipeline.
May 6, 20266 min read
Application Security
SonarQube SCA Capability Review 2026
A working review of SonarQube's SCA capability in 2026, comparing it against dedicated SCA tools on coverage, reachability, policy depth, and developer experience.
May 6, 20265 min read
Tools
Checkmarx vs WhiteSource (Mend) Buyer Comparison 2026
A 2026 head-to-head buyer comparison of Checkmarx and Mend (formerly WhiteSource): SCA depth, SAST, reachability, AI features, pricing, and decision framework.
May 6, 20266 min read
SecOps
Threat and Vulnerability Management: Building the Program
How to actually build a threat and vulnerability management program, from asset inventory to closed-loop remediation, rather than buying a scanner and calling it done.
May 6, 20265 min read
Buyer's Guides
Safeguard vs Aikido Security: which is the better fit?
Safeguard vs Aikido Security compared on product scope, SBOM depth, pipeline enforcement, and compliance, so you can pick the platform that fits your risk.
May 6, 20268 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.