Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
An unreleased refactoring in Tomcat's bundled Commons FileUpload left temp files undeleted on Windows, risking a disk-exhaustion DoS. Here is what CVE-2023-42794 is and how to fix it.
The CWE meaning is simpler than it looks: a shared catalog of software weakness types. Here is how it differs from CVE and how to actually use it.
If you searched for 'cve: byn', you probably landed on a garbled query. Here is what a CVE identifier actually is, how to read one, and why 'BYN' is not part of it.
A vulnerability test is a systematic check of a system for known security weaknesses. Here is what it involves, the types available, and how to run one that produces action instead of a wall of findings.
Checkmarx API Security discovers your real API footprint — including shadow and zombie endpoints — and correlates static and dynamic findings. Here's how it fits an AppSec program.
CVE-2023-46589 lets an attacker smuggle HTTP requests past a reverse proxy by abusing malformed trailer headers in Apache Tomcat. Here is how it works and which versions to run.
A PHP code checker can mean a syntax linter, a static analyzer like PHPStan, or a security taint scanner. Here is what each one catches and how to combine them.
The Semgrep API lets you list deployments, pull findings, and manage projects and tokens programmatically. Here is how authentication works and how to use it well.
The right app security tools do not overlap by accident — each one covers a layer the others cannot see, and the gaps between them are where breaches start.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
