Application Security
SAST vs DAST: how do you use both to protect an application?
SAST reads code early and finds known flaw patterns. DAST tests the running app and finds what code hides. See how to use both in one workflow.
Oct 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
What belongs on a secure coding checklist for TypeScript teams?
TypeScript types vanish at runtime, so a checklist must cover input validation, strict compiler flags, unsafe casts, dependencies and prototype pollution.
Oct 18, 20264 min read
Application Security
What are the main types of VPN and which one fits your use case?
VPN types split by who connects, remote access or site to site, and by protocol: IPsec, TLS based, WireGuard and provider MPLS. Match each to a use.
Oct 18, 20264 min read
Application Security
What are the types of VPN protocols and how do they differ?
Common VPN protocols are IPsec with IKEv2, WireGuard, OpenVPN, L2TP and old PPTP. They differ in layer, key exchange, age and how easy they are to audit.
Oct 18, 20264 min read
Application Security
What are the types of code security audit and when do you use each?
Code security audits include manual review, static analysis, dependency review, secrets review and penetration testing. Match each to your question.
Oct 18, 20264 min read
Application Security
Which two-factor authentication method is safest to use?
Two-factor authentication adds a second proof beyond your password. Passkeys and security keys resist phishing best, and app codes beat SMS. Rollout steps.
Oct 18, 20264 min read
Application Security
What is a transparent firewall and when is bridge mode useful?
A transparent firewall filters at layer 2 without changing IP addressing, so it drops into a network unseen. Learn the benefits, limits and when to use it.
Oct 18, 20264 min read
Application Security
What happens in a TLS 1.3 handshake, step by step?
A TLS 1.3 handshake agrees on keys and proves the server's identity in one round trip. Follow the messages in order and see what stays encrypted.
Oct 18, 20264 min read
Application Security
Is TLS decryption safe? What inspection does to encryption
TLS decryption lets a proxy read encrypted traffic to catch malware, but it breaks end-to-end trust. Learn the risks, what CISA says and how to scope it.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.