Vulnerability Analysis
Critical RCE via ImageMagick: hacking Docker containers
ImageTragick and CVE-2022-44268 show how one image-processing library keeps handing attackers shells and secrets inside Docker containers.
May 1, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedIndustry Analysis
Secrets detection: how it works and why it matters
How secrets detection tools catch leaked keys before attackers do, why breaches like Toyota's still happen, and how Safeguard compares to Aikido Security.
May 1, 20268 min read
AppSec
Checkmarx IAST Explained: What It Does and When to Use It
A practical look at Checkmarx IAST, how interactive testing differs from SAST and DAST, and where it fits in a modern AppSec program.
Apr 30, 20266 min read
Security
How to Check Website Vulnerability: A Practical Guide
To check website vulnerability properly you combine automated scanning of the running app with dependency analysis of what it's built from. Here's a workflow that covers both.
Apr 30, 20266 min read
Containers
Node Docker Images: Picking the Right Base for Production
The node docker image you pick as a base determines most of your container's attack surface and size. Here's how to choose between full, slim, and alpine variants for production.
Apr 30, 20265 min read
Comparisons
What Is Checkmarx? A Plain-English Overview
Checkmarx is one of the oldest names in static analysis, built for large enterprises with dedicated security teams. Here's what it actually does and how it stacks up.
Apr 30, 20264 min read
AppSec
Open Redirect Vulnerabilities: How Attackers Abuse Them
An open redirect attack abuses a trusted domain's own redirect functionality to send victims to a malicious site — low severity on its own, but a key ingredient in phishing and OAuth token theft.
Apr 30, 20266 min read
Security
NVD Meaning: What the National Vulnerability Database Actually Does
The NVD is the U.S. government's repository of vulnerability data, built on top of the CVE list and enriched with severity scores and affected-version details. Here is what that means in practice.
Apr 30, 20265 min read
Supply Chain
SCA Security: What Software Composition Analysis Actually Catches
SCA security scans the open source dependencies that make up most of your codebase, finding known CVEs, risky licenses, and malicious packages. Here is what it catches — and what it does not.
Apr 30, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.