Application Security
ASVS 5.0 V2.1.3: Document Business Logic Limits
ASVS 5.0 V2.1.3 (Level 2) requires written business limits, per user and global, such as transfer caps and request quotas. A template and a test.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
ASVS 5.0 V2.1.2: Document Rules for Combined Data Items
ASVS 5.0 V2.1.2 (Level 2) wants documented checks that related fields agree with each other, such as suburb and ZIP code. Examples and how to verify.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V2.1.1: Document Your Input Validation Rules
ASVS 5.0 V2.1.1 (Level 1) requires written validation rules for every data item. What to record, a simple format, and how to check the docs match the code.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V17.3.2: Make Signaling Survive Malformed Messages
ASVS V17.3.2 requires the signaling server to keep serving users when it receives malformed messages. Validation, overflow safety and a fuzz test.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V17.3.1: Rate Limit WebRTC Signaling Against Floods
ASVS V17.3.1 says the signaling server must keep serving legitimate messages during a flood, by rate limiting at the signaling level. Code and tests.
Oct 18, 20265 min read
Application Security
ASVS 5.0 V17.2.8: Check the DTLS Certificate Against the SDP Fingerprint
ASVS V17.2.8 requires comparing the DTLS certificate with the SDP fingerprint and ending the stream on mismatch. Code, test and common mistakes.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V17.2.7: Keep Call Recording Alive During an SRTP Flood
ASVS V17.2.7 requires recording components tied to the media server to keep working during a flood of legitimate SRTP traffic. Design and test.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V17.2.6: Check Your Media Server for the DTLS ClientHello Race
ASVS V17.2.6 asks you to confirm your media server is not vulnerable to the DTLS ClientHello race condition, by version check or by running the test.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V17.2.5: Keep Media Flowing During an SRTP Flood
ASVS V17.2.5 requires the media server to keep processing media during a flood of SRTP packets from legitimate users. Limits and a load test.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.