Application Security
How should a TypeScript app handle secrets safely?
Keep secrets out of source and browser bundles, load them at runtime, validate at startup, redact in logs and rotate on a schedule so leaks expire.
Oct 18, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
How should a Scala application handle secrets?
Keep secrets out of code, config files and logs, fetch short lived ones from a manager at runtime, rotate them, and know the order to act when one leaks.
Oct 18, 20264 min read
Application Security
What is secret management and what does a good setup include?
Secret management is how you create, store, rotate and revoke credentials such as keys and tokens. OWASP's cheat sheet gives the structure to follow.
Oct 18, 20264 min read
Application Security
What is the SDLC and where does security fit in each phase?
The SDLC is the path from idea to retirement. NIST's SSDF says security practices must be added to each model. Here is a phase by phase map you can use.
Oct 18, 20264 min read
Application Security
SCIM vs SAML: what each does and when you need both
SAML signs users in. SCIM creates, updates and removes their accounts. Enterprise buyers want both, and the gap shows when someone leaves the company.
Oct 18, 20264 min read
Application Security
A secure coding checklist for Scala teams
Types help but do not stop injection, XSS or leaked secrets. A practical Scala checklist covering queries, output, Play filters, dependencies and review.
Oct 18, 20264 min read
Application Security
SCA vs SAST: what each scanner can actually see
SAST reads your own code for flaws. SCA inventories the third party components you ship and matches them to known CVEs. Each is blind to the other.
Oct 18, 20264 min read
Application Security
SAST vs SCA: what does each test find and do you need both?
SAST scans the code you wrote for flaws. SCA checks the open source you depend on for known vulnerabilities. They find different problems, so run both.
Oct 18, 20264 min read
Application Security
How does SAST find SQL injection, and what does it miss?
SAST finds SQL injection by tracing untrusted input to a database call. See how taint analysis works, what it misses and how to fix findings properly.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.