Container Security
Scanning container images in CI/CD pipelines
Where to put container image scanning in your CI/CD pipeline, what it actually catches, and how to stop CVE floods from blocking every build.
Jun 27, 20267 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
Snyk Valuation: How Much Is Snyk Worth?
Snyk's valuation peaked at $8.5 billion in 2021, then repriced through later rounds and investor markdowns. Here is the documented timeline and what it signals.
Jun 27, 20265 min read
Buyer's Guides
Checkmarx vs Snyk: which AppSec platform fits your stack
Checkmarx vs Snyk searches usually miss the real question: does your AppSec stack cover source code, or the full build-to-deploy supply chain? Here's how to check.
Jun 27, 20268 min read
Vulnerability Analysis
CVE-2019-1010083: Denial of service in Flask via large mu...
CVE-2019-1010083 let attackers crash Flask apps with crafted multipart requests. Here's the impact, affected versions, and how to remediate the DoS flaw.
Jun 27, 20267 min read
Container Security
Container isolation with namespaces, cgroups, and seccomp
Namespaces, cgroups, and seccomp each isolate a different layer of a container — and a single misconfigured one, like CVE-2024-21626 showed, breaks all three.
Jun 27, 20266 min read
Vulnerability Analysis
CVE-2023-25577: Denial of service in Werkzeug multipart p...
CVE-2023-25577 lets attackers trigger denial of service in Werkzeug's multipart parser via crafted uploads. Here's the impact, timeline, and fix.
Jun 27, 20267 min read
Buyer's Guides
Checkmarx alternatives for enterprise AppSec teams
Checkmarx bundles SAST, SCA, and DAST into one platform. For teams whose real gap is supply chain risk, here's how Safeguard compares on reachability, SBOM, and deployment.
Jun 27, 20268 min read
Vulnerability Analysis
CVE-2020-10108: Cross-protocol scripting in Twisted
CVE-2020-10108 lets a malicious server abuse Twisted's redirect handling for cross-protocol scripting. Affected versions, risk context, and fixes inside.
Jun 26, 20268 min read
Vulnerability Analysis
CVE-2020-10109: Denial of service in Twisted via 100-cont...
CVE-2020-10109 lets attackers hang Twisted's HTTP server with malformed 100-continue requests, exhausting resources until it stops responding.
Jun 26, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.