Vulnerabilities
PHP Vulnerability Classes and Common Fixes
The recurring php vulnerability classes — SQL injection, file inclusion, deserialization, and type-juggling bugs — and the specific fixes that close each one.
May 20, 20265 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedApplication Security
Securing Laravel PHP applications
CVE-2021-3129, leaked APP_KEYs, and Eloquent mass assignment still compromise Laravel apps in 2026 — here's how each attack works and how to close it.
May 20, 20267 min read
Buyer's Guides
Endor Labs Alternatives: Evaluating SCA and Reachability ...
A practical, verification-first comparison of Safeguard and Endor Labs on reachability methodology, ecosystem coverage, and workflow fit for SCA buyers.
May 20, 20268 min read
Open Source
react-loader-spinner: A Security Guide
react-loader-spinner adds ready-made loading spinners to React apps. It is UI-only, so its security story is entirely about dependency hygiene and install-time provenance.
May 19, 20265 min read
Open Source
The moment npm Package in 2025: Security Review and Safe Usage
The moment npm package is in maintenance mode, not abandoned. Here is what that means for security, when it is fine to keep, and what to migrate to when it is not.
May 19, 20265 min read
AppSec
IaC Scanning: Catching Cloud Misconfigurations Before Deploy
An IaC scan checks your Terraform, CloudFormation, and Kubernetes files for insecure defaults before they become running infrastructure. Here's how it works and how to wire it into CI.
May 19, 20266 min read
Compliance
Compliance Reporting with Safeguard: From Raw Data to Audit-Ready Documents
How to use Safeguard's compliance reporting engine to generate audit-ready documentation for SOC 2, ISO 27001, NIST SSDF, and other frameworks without weeks of manual work.
May 19, 20266 min read
Open Source
@babel/eslint-parser: A Security and Migration Guide
@babel/eslint-parser is the maintained ESLint parser for Babel-transformed JavaScript, replacing the deprecated babel-eslint. Here is why the rename happened and what it means for your toolchain.
May 19, 20265 min read
Containers
Kubernetes securityContext Capabilities: Drop ALL, Add Only What You Need
Linux capabilities are the privileges inside a container that attackers reuse after a breakout. Setting Kubernetes securityContext capabilities to drop ALL is the cheapest hardening you will do.
May 19, 20266 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.