Infrastructure Security
In-depth guides and analysis on infrastructure security from the Safeguard engineering team.
52 articles
Apache Web Server Hardening Guide for Production Environments
Apache httpd still serves millions of websites. Its default configuration exposes information, accepts weak TLS, and enables features you probably do not need.
Pulumi and Crossplane Security: IaC Beyond Terraform
Security considerations for Pulumi and Crossplane as infrastructure-as-code alternatives, including unique risks and hardening strategies.
Terraform Provider Verification: Securing Your Infrastructure as Code Supply Chain
Terraform providers are plugins that execute with full access to your infrastructure credentials. Verifying their integrity is not optional.
Rate Limiting in Package Registries: Balancing Security and Developer Experience
Docker Hub's rate limits broke builds worldwide. Rate limiting is necessary for registry security, but getting it wrong disrupts entire engineering organizations.
Load Balancer Security Considerations for Modern Architectures
Load balancers terminate TLS, distribute traffic, and make routing decisions. Their security configuration affects every service behind them.
DNS Security and Software Distribution: The Foundation Nobody Secures
Every software download, package install, and API call starts with a DNS query. DNS compromise redirects your supply chain at the most fundamental level — and most organizations have no visibility.
Artifactory Security Best Practices for Enterprise Teams
JFrog Artifactory is a universal artifact manager. Getting its security right requires understanding its permission model, Xray integration, and access token management.
DDoS Protection for Software Distribution Infrastructure
Package registries, artifact repositories, and update servers are high-value DDoS targets. Taking them down disrupts entire software supply chains.
Nexus Repository Security Hardening: Beyond the Defaults
Sonatype Nexus is everywhere. Its default configuration is permissive. Here is how to lock it down for enterprise use.
Debian Repository Security: A Practical Hardening Guide
Debian APT is powerful but riddled with trust assumptions. Here is how to lock it down for production environments.
Database Extensions as Supply Chain Risk: The Overlooked Attack Surface
PostgreSQL extensions, MySQL plugins, and database add-ons run with database-level privileges. A compromised extension has direct access to your data. Most organizations never audit them.
Harbor Registry Security Configuration: A Complete Hardening Guide
Harbor is the most popular open-source container registry. Its security features are powerful but require deliberate configuration to be effective.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.