Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (3306)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3306)Developer Tools (2961)Compliance (2830)AI Security (1718)Supply Chain (1423)Supply Chain Security (1025)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Product (507)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (286)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (74)Threat Intelligence (66)Infrastructure Security (65)Tools (50)FAQ (50)SBOM & Compliance (41)Comparisons (35)Engineering (29)Licensing (26)Tutorials (24)Ransomware (24)SecOps (22)Guides (22)Kubernetes Security (22)Regulation (20)Vulnerability Guides (20)Industry Guides (19)Compliance & Regulations (18)Case Studies (18)Emerging Technology (17)Solutions (17)Vulnerability Response (16)Risk Management (16)Threat Research (16)Tool Reviews (16)Agent Security (16)Cryptography (15)Compliance & Frameworks (15)Incident Response (15)Security Concepts (15)Identity Security (15)Industry Events (14)Security Strategy (13)Frameworks (12)Dependency Security (11)Data Breach (11)Web Security (11)Security News (10)Career (10)Enterprise (9)Culture (9)Company (9)Architecture (8)Standards (8)Vulnerability Research (8)Strategy (8)Dependency Management (7)Industry Insights (7)Industry Trends (7)How-To Guide (7)Secure Development (7)Zero-Day Exploits (7)Network Security (7)Dev Practices (6)Industry (6)Security Operations (6)Developer Security (6)Organizational Security (6)Vendor Comparison (6)Breach Analysis (5)Code Security (5)Mobile Security (4)Tool Comparisons (4)Product Launch (4)Policy (4)Cryptocurrency Security (4)Offensive Security (4)Regional Security (3)Healthcare Security (3)Hardware Security (3)Social Engineering (3)Governance (3)Startup Security (3)Build Security (3)Policy & Compliance (3)API Security (3)Analysis (3)SBOM Standards (2)DeFi Security (2)Industry News (2)Security Architecture (2)Security Management (2)SBOM and Compliance (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Tools & Platforms (1)Tools & Techniques (1)Events (1)Architecture Security (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Nation-State Threats (1)Language Security (1)Privacy & Security (1)Threat Analysis (1)Runtime Security (1)Threat Modeling (1)Emerging Threats (1)Healthcare (1)Data Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)PKI Security (1)Buyer Guides (1)Privacy (1)Product Update (1)Technical (1)Lifecycle Management (1)Credential Attacks (1)Business Continuity (1)

Articles

RSS feed
Application Security

ASVS 5.0 V1.4.3: Release Memory and Clear Dangling Pointers

ASVS 5.0 V1.4.3 (Level 2) asks you to free allocated resources and null out references so use after free bugs cannot happen. How to build and test it.

Oct 18, 20263 min read
Application Security

ASVS 5.0 V1.4.2: Prevent Integer Overflows With Range Checks

ASVS 5.0 V1.4.2 (Level 2) requires sign, range and input validation so integer overflows cannot corrupt memory or business math. Code and tests inside.

Oct 18, 20263 min read
Application Security

ASVS 5.0 V1.4.1: Use Memory Safe Strings and Copies

ASVS V1.4.1 requires memory safe strings, safer copies and careful pointer use to stop overflows. See unsafe versus safe C code and how to test with sanitizers.

Oct 18, 20265 min read
Application Security

ASVS 5.0 V1.3.9: Sanitize Content Sent to Memcache

ASVS V1.3.9 requires sanitizing content before it reaches memcache. Learn how CRLF in keys enables command injection and how to stop it.

Oct 18, 20262 min read
Application Security

ASVS 5.0 V1.3.8: Prevent JNDI Injection in Java

ASVS V1.3.8 requires sanitizing input used in JNDI lookups and configuring JNDI securely. See the settings and a test that catches remote lookups.

Oct 18, 20262 min read
Application Security

ASVS 5.0 V1.3.7: Never Build Templates From User Input

ASVS V1.3.7 forbids building templates from untrusted input. See the vulnerable pattern in Jinja2 and Node, the safe fix, and how to test for SSTI.

Oct 18, 20264 min read
Application Security

ASVS 5.0 V1.3.6: Block SSRF With Strict Allowlists

ASVS V1.3.6 requires allowlisting protocols, domains, paths and ports before server side requests. See a safe fetch helper and a test plan for SSRF.

Oct 18, 20265 min read
Application Security

ASVS 5.0 V1.3.5: Sanitize Markdown, CSS and Template Content

ASVS V1.3.5 requires sanitizing or disabling user supplied Markdown, CSS, XSL and BBCode. See safe renderer settings and tests for each format.

Oct 18, 20263 min read
Application Security

ASVS 5.0 V1.3.4: Sanitize User Supplied SVG Files

ASVS V1.3.4 requires SVG uploads to be reduced to safe tags and attributes. Learn why SVG is code, how to sanitize it, and how to test uploads.

Oct 18, 20263 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

Book a demoGet started

No sales call required, even your agent can complete the purchase over MCP.