Security
Checkmarx Documentation: A Guide to Navigating It
Checkmarx documentation is deep but sprawling. Here is how to find what you need across SAST, the APIs, and integrations without losing an afternoon.
Jun 8, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
What Makes a Strong Application Security Solution
An application security solution is not a single scanner but a coordinated set of controls across the software lifecycle. Here is what a real one covers.
Jun 7, 20265 min read
Security
What Is a Target URL? Definition and Security Implications
A target URL is the destination address a request, scan, or link is aimed at. Here is what the term means across different contexts and why getting it right matters for security testing and web safety.
Jun 7, 20266 min read
Security
Snyk Jobs: What a Career in Developer Security Looks Like
Curious about Snyk jobs and roles in the developer-security space? Here is how the field is structured, the skills that get you hired, and what to expect.
Jun 6, 20267 min read
Security
CVE-2021-3331: How the WinSCP URL Handler RCE Works
CVE-2021-3331 is a critical remote code execution flaw in WinSCP's URL handling before 5.17.10. Here is how a crafted link triggers it and how to fix it.
Jun 6, 20265 min read
Security
CVSS Full Form: What Does CVSS Stand For?
The CVSS full form is Common Vulnerability Scoring System. Here is what the acronym means, how the 0-10 score is built, and how to use it without treating the number as gospel.
Jun 6, 20266 min read
Security
How Can a DevOps Team Take Advantage of Artificial Intelligence?
A DevOps team takes advantage of artificial intelligence by using it where signal is buried in noise — triaging alerts, prioritizing vulnerabilities, and drafting fixes. Here is where it pays off and where it does not.
Jun 6, 20266 min read
Security
Choosing a Software Composition Analysis Tool: A Practical Guide
A software composition analysis tool inventories your open-source dependencies and flags the vulnerable ones. Here is how it differs from static code analysis and how to pick one.
Jun 5, 20267 min read
Security
A Threat Modeling Example, Walked Through Step by Step
A concrete threat modeling example beats any amount of theory. We model a real feature, a file-upload API, with STRIDE and turn the findings into fixes.
Jun 4, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.