Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (521)AI Security (779)Vulnerability Analysis (568)Security (521)DevSecOps (494)Application Security (480)Open Source Security (406)AppSec (306)Compliance (301)Industry Analysis (294)Container Security (284)Best Practices (252)Open Source (252)Cloud Security (239)Buyer's Guides (216)Software Supply Chain Security (175)Regulatory Compliance (138)Incident Analysis (137)Vulnerability Management (133)Security Guides (124)Concepts (116)Containers (100)Supply Chain Attacks (92)SBOM (76)Vulnerabilities (71)Product (69)Threat Intelligence (64)Supply Chain Security (55)Supply Chain (55)Infrastructure Security (52)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (32)Licensing (26)Tutorials (24)Engineering (24)Ransomware (24)Kubernetes Security (22)Guides (22)SecOps (21)Vulnerability Guides (20)Regulation (20)Industry Guides (19)Case Studies (18)Compliance & Regulations (18)Solutions (17)Emerging Technology (17)Threat Research (16)Agent Security (16)Vulnerability Response (16)Risk Management (16)Tool Reviews (16)Compliance & Frameworks (15)Identity Security (15)Cryptography (15)Security Concepts (15)Incident Response (15)Industry Events (14)Security Strategy (13)Frameworks (12)Data Breach (11)Dependency Security (11)Web Security (11)Career (10)Enterprise (9)Culture (9)Strategy (8)Company (8)Standards (8)Architecture (8)Industry Insights (7)Industry Trends (7)Secure Development (7)How-To Guide (7)Zero-Day Exploits (7)Network Security (7)Dependency Management (7)Industry (6)Vendor Comparison (6)Research (6)Dev Practices (6)Security Operations (6)Organizational Security (6)Developer Security (6)Breach Analysis (5)Code Security (5)Cryptocurrency Security (4)Tool Comparison (4)Mobile Security (4)Product Launch (4)Policy (4)Offensive Security (4)Tool Comparisons (4)Healthcare Security (3)Social Engineering (3)Build Security (3)Governance (3)Vulnerability Research (3)Regional Security (3)Policy & Compliance (3)SBOM Standards (3)Software Supply Chain (3)Analysis (3)Startup Security (3)Hardware Security (3)Zero-Day Analysis (2)Industry News (2)Release (2)SBOM and Compliance (2)Security Management (2)Threat Actors (2)API Security (2)Security Architecture (2)Security Culture (2)DeFi Security (2)Incident Postmortem (1)Technical (1)Healthcare (1)Events (1)Product Update (1)Language Security (1)Emerging Threats (1)Privacy (1)Lifecycle Management (1)Career Development (1)Tools & Platforms (1)Threat Modeling (1)Browser Security (1)Threat Analysis (1)Business Continuity (1)Runtime Security (1)Credential Attacks (1)PKI Security (1)Architecture Security (1)Nation-State Threats (1)Tools & Techniques (1)Privacy & Security (1)

Articles

RSS feed
Security

Checkmarx Documentation: A Guide to Navigating It

Checkmarx documentation is deep but sprawling. Here is how to find what you need across SAST, the APIs, and integrations without losing an afternoon.

Aug 21, 20256 min read
Security

What Makes a Strong Application Security Solution

An application security solution is not a single scanner but a coordinated set of controls across the software lifecycle. Here is what a real one covers.

Aug 21, 20255 min read
Security

What Is a Target URL? Definition and Security Implications

A target URL is the destination address a request, scan, or link is aimed at. Here is what the term means across different contexts and why getting it right matters for security testing and web safety.

Aug 20, 20256 min read
Security

Snyk Jobs: What a Career in Developer Security Looks Like

Curious about Snyk jobs and roles in the developer-security space? Here is how the field is structured, the skills that get you hired, and what to expect.

Aug 19, 20257 min read
Security

CVE-2021-3331: How the WinSCP URL Handler RCE Works

CVE-2021-3331 is a critical remote code execution flaw in WinSCP's URL handling before 5.17.10. Here is how a crafted link triggers it and how to fix it.

Aug 19, 20255 min read
Security

CVSS Full Form: What Does CVSS Stand For?

The CVSS full form is Common Vulnerability Scoring System. Here is what the acronym means, how the 0-10 score is built, and how to use it without treating the number as gospel.

Aug 19, 20256 min read
Security

How Can a DevOps Team Take Advantage of Artificial Intelligence?

A DevOps team takes advantage of artificial intelligence by using it where signal is buried in noise — triaging alerts, prioritizing vulnerabilities, and drafting fixes. Here is where it pays off and where it does not.

Aug 19, 20256 min read
Security

Choosing a Software Composition Analysis Tool: A Practical Guide

A software composition analysis tool inventories your open-source dependencies and flags the vulnerable ones. Here is how it differs from static code analysis and how to pick one.

Aug 19, 20257 min read
Security

A Threat Modeling Example, Walked Through Step by Step

A concrete threat modeling example beats any amount of theory. We model a real feature, a file-upload API, with STRIDE and turn the findings into fixes.

Aug 15, 20256 min read
Page 14 of 58

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

Blog — security (Page 14) | Safeguard — Software Supply Chain Security Insights