Research
In-depth guides and analysis on research from the Safeguard engineering team.
100 articles
Which SIEM use cases should you build first?
Start SIEM with a few detections tied to attacker behavior: failed then successful sign-ins, new admins, log tampering, risky changes. Each needs logs.
Which firewall features matter most for a modern network?
Firewalls grew from packet filters to stateful inspection, deep packet inspection, TLS decryption and threat detection. See which features fit which job.
Which AWS security tools do you need first?
Start with identity controls, logging, threat detection and a findings dashboard in AWS, then add data and code checks. Here is a sensible order and why.
What is a ruggedized firewall and when does an OT site need one?
A ruggedized firewall survives harsh sites, but zone rules, strict outbound limits and patching matter as much as the hardware. A buyer's guide.
What does "zero trust edge" actually mean?
Zero trust edge is a marketing label for applying NIST zero trust ideas at the point where users and devices reach apps. Here is what to ask a vendor.
What is zero touch provisioning (ZTP) and is it secure?
ZTP lets a new device configure itself on first boot. Plain ZTP can be spoofed, while Secure ZTP in RFC 8572 adds signed data and ownership checks.
What is wardriving and how do you protect your Wi-Fi from it?
Wardriving is mapping wireless networks while moving through an area. Mapping is passive, but weak Wi-Fi settings invite attack. Learn how to harden yours.
What is vishing and how do you stop a voice phishing call?
Vishing is phishing by phone call. Hang up, call back on an official number, never share codes or pay with gift cards, and set a verification step at work.
What is user behavior analytics (UBA) and when does it help?
UBA builds a baseline of normal activity per user and flags deviations. It helps find stolen accounts and insider misuse, but needs clean data and tuning.
What is unified threat management (UTM) and who is it for?
UTM bundles a firewall with malware filtering and probe blocking in one system. It suits small sites that want one policy point, with trade offs to weigh.
What is unified endpoint management and when do you need it?
Unified endpoint management, or UEM, manages laptops, phones and other devices from one console and policy set. Here is what it covers and how to scope it.
What is UEBA (user and entity behavior analytics)?
UEBA builds a baseline of normal behavior for users, hosts and services, then flags deviations like odd logins or data pulls. It needs clean logs.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.