Application Security
ASVS 5.0 V13.4.1: Keep .git and .svn Out of Production
ASVS 5.0 V13.4.1 (Level 1) says source control folders must not ship, or must be unreachable. Here is how to build, configure and test for it.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
ASVS 5.0 V13.3.4: Expire and Rotate Secrets on a Schedule
ASVS 5.0 V13.3.4 (Level 3): configure secrets to expire and rotate per your documentation. Automatic rotation, overlap windows and tests.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V13.3.3: Run Crypto Operations Inside an Isolated Module
ASVS 5.0 V13.3.3 (Level 3): perform cryptographic operations in a vault or HSM so key material never leaves the module. Signing example.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V13.3.2: Apply Least Privilege to Secret Access
ASVS 5.0 V13.3.2 (Level 2): each service and person should read only the secrets they need. Example vault policy and how to audit it.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V13.3.1: Keep Backend Secrets in a Secrets Manager
ASVS 5.0 V13.3.1 (Level 2): use a secrets manager or key vault, and keep secrets out of source code and build artifacts. HSM backing at Level 3.
Oct 18, 20264 min read
Application Security
ASVS 5.0 V13.2.6: Match Connection Behavior to Your Documentation
ASVS 5.0 V13.2.6 (Level 3): code must follow the documented connection limits, timeouts and retry rules. How to check that docs and config agree.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V13.2.5: Configure the Server With an Outbound Allowlist
ASVS 5.0 V13.2.5 (Level 2): the web or app server itself must have an allowlist of systems it may send requests to or load data from.
Oct 18, 20262 min read
Application Security
ASVS 5.0 V13.2.4: Allowlist Where Your Application Can Connect
ASVS 5.0 V13.2.4 (Level 2): define an allowlist of external systems the app may contact. Code for SSRF safe fetching plus network egress rules.
Oct 18, 20263 min read
Application Security
ASVS 5.0 V13.2.3: Never Use Default Credentials Between Services
ASVS 5.0 V13.2.3 (Level 2): service credentials must not be defaults like admin/admin. How to find them in configs, images and running systems.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.