AppSec
XSS Attack Examples: How Cross-Site Scripting Works and How to Stop It
Walk through realistic XSS attack examples across the three main flavors of cross-site scripting, then see how to detect and remediate each one.
Apr 4, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedThreat Intelligence
Lazarus Financial Sector Campaigns 2024-2025
Lazarus Group's 2024-2025 financial sector campaigns combined exchange compromises, DeFi exploits, and developer social engineering. Here is what defenders must know.
Apr 4, 20268 min read
Buyer's Guides
Chainguard pricing model and total cost of ownership
Chainguard's pricing is quote-based and centers on hardened base images. Here's how to model the real total cost of ownership, and where full-chain coverage fits in.
Apr 4, 20268 min read
AppSec
SCA Vulnerabilities: How to Find and Fix Them in Your Dependencies
SCA vulnerabilities are known security flaws in the open-source packages your app pulls in. Here is how to detect them, cut the noise, and fix the ones that matter.
Apr 4, 20267 min read
Supply Chain
What package-lock.json Does and Why You Should Commit It
The main package-lock.json use is pinning your entire npm dependency tree to exact, integrity-checked versions so every install is reproducible. Here is what is inside it and why deleting it is a bad habit.
Apr 4, 20266 min read
Software Supply Chain Security
What is a Software Supply Chain Attack
A software supply chain attack compromises trusted dependencies or build systems to spread malicious code downstream — here's how it works, and how to stop it.
Apr 4, 20267 min read
Vulnerability Management
Zero-day vulnerabilities: what they are and how to protec...
Zero-days can't be patched before they're exploited. See how Log4Shell, MOVEit, and the XZ backdoor happened, and what real zero-day vulnerability protection requires.
Apr 4, 20267 min read
DevSecOps
Updating Python on macOS from the Terminal (Without Breaking Things)
How to update Python on a Mac terminal the safe way: Homebrew or pyenv for the interpreter, never the system copy, plus how to set your default version and keep old installs from lingering.
Apr 4, 20266 min read
AppSec
Open Redirect Vulnerabilities: What They Are and How to Fix Them
An open redirect vulnerability fix is usually a ten-line change, but the bug keeps shipping because redirects hide in login flows, tracking links, and OAuth callbacks. Here is how to find and close them.
Apr 4, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.