Industry Analysis
Security Misconfiguration in APIs
Optus, T-Mobile, Peloton, and USPS were all breached through misconfigured APIs, not exploits. Here's what causes it, what it costs, and how to catch it first.
Jul 11, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedBuyer's Guides
Best security orchestration, automation and response (SOA...
A practical buyer's guide to SOAR tools -- comparing Splunk, Cortex XSOAR, Microsoft Sentinel, Tines, Swimlane, and Torq for automation and incident response.
Jul 11, 20268 min read
AppSec
XSS Code Examples: How Cross-Site Scripting Looks in Practice
An XSS code example makes the abstract concrete: here is what vulnerable code looks like for each type of cross-site scripting, and the small change that fixes each one.
Jul 11, 20265 min read
DevSecOps
The Python Pickle Exploit: Why Unpickling Untrusted Data Runs Code
A Python pickle exploit works because unpickling can execute arbitrary code during deserialization. Here is how the class works, why it is unavoidable by design, and what to use instead.
Jul 11, 20266 min read
DevSecOps
WebAssembly WASI Security Model in 2025
A technical look at WASI Preview 2, the component model, and capability-based isolation for running untrusted code inside supply chain tooling.
Jul 11, 20265 min read
Security
The ZAP Security Testing Tool: A Practical Guide
How the ZAP security testing tool works as a free DAST scanner: passive and active scanning, the spider and AJAX spider, and how to run it in CI without noise.
Jul 10, 20266 min read
Security
Licence logiciel : le guide securite pour choisir et rester conforme
Une licence logiciel definit ce que vous avez le droit de faire avec un code, et mal la gerer expose autant a un risque juridique qu'a un risque securite.
Jul 10, 20266 min read
Build Security
Software Provenance: An End-to-End Guide
Provenance answers where software came from and how it was built. Here is how to implement end-to-end provenance tracking from source to deployment.
Jul 10, 20266 min read
Incident Analysis
Dependency confusion attacks against major tech companies
A look at the dependency confusion attacks that hit Apple, Microsoft, PayPal, and PyTorch — and why the technique still works against top engineering orgs.
Jul 10, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.