Application Security
Serverless security implications from infra to OWASP
Serverless shrinks the OS attack surface but expands the IAM and dependency one. Here's how the OWASP Serverless Top 10 maps to real 2021-era incidents.
Apr 27, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity
How to Choose a Security Company for Modern Software
Picking a security company is less about brand recognition than about matching a vendor's real strengths to the risks your software actually faces. Here is a practical way to decide.
Apr 27, 20266 min read
Vulnerability Analysis
How Trivy sources vulnerability data (NVD, vendor advisor...
Trivy's CVE data comes from NVD, GHSA, and distro trackers compiled into a periodic snapshot — not kube-hunter. Here's how the pipeline really works, and where it lags.
Apr 27, 20267 min read
Containers
Python Docker Images: How to Choose a Secure, Slim Base
Choosing among Python Docker images comes down to trade-offs between size, glibc compatibility, and attack surface. Here is how the official tags differ and how to build a lean, low-CVE image.
Apr 27, 20265 min read
Application Security
10 serverless security best practices
10 concrete, numbers-backed serverless security practices covering IAM least privilege, dependency SBOMs, event injection, and secrets management.
Apr 27, 20266 min read
AppSec
White Box Pen Testing: How It Works and When to Use It
White box pen testing gives the tester full access to source, architecture, and credentials. Here's how it differs from black box, when to choose it, and the tools involved.
Apr 27, 20266 min read
Cloud Security
CNAPP according to Gartner: capabilities and evaluation c...
Gartner's CNAPP framework demands unified risk correlation, not bundled scanners. Here's how Trivy (Aqua) maps to it — and where supply chain security closes the gap.
Apr 27, 20267 min read
Open Source
angular-ui-router: Security and Maintenance Guide
angular-ui-router is the classic routing library for AngularJS 1.x. The library itself is stable, but the framework it depends on reached end of life, and that is the real risk to weigh.
Apr 26, 20265 min read
Security
What Is a Code Checker? A Security-Focused Guide
A code checker analyzes source for bugs, style issues, and security flaws before they ship. Here is how the security-relevant ones work, with a focus on Java.
Apr 26, 20267 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.