Research
In-depth guides and analysis on research from the Safeguard engineering team.
100 articles
What is OpenTelemetry and how do traces, metrics and logs fit?
OpenTelemetry is an open standard and toolkit for generating and exporting traces, metrics and logs. See the pieces, the Collector and data hygiene checks.
What is network detection and response (NDR) and what can it see?
NDR analyzes network traffic and metadata to find attackers moving inside your environment. Learn what it sees, what encryption hides, and how to judge it.
What is NAT, and does network address translation add security?
NAT rewrites IP addresses so many devices share one public address. It hides internal layout by side effect but is not a firewall. Here is how to treat it.
What does MTTR mean: repair, recover, respond or resolve?
MTTR is an average time after a failure, but the R can mean repair, recover, respond or resolve. Learn the definitions and why averages mislead.
What is MPLS and how does label switching work?
MPLS forwards packets by short labels instead of IP lookups at every hop. Here is how it works, why it isolates traffic, and why it does not encrypt it.
What is managed SD-WAN and what are the security tradeoffs?
Managed SD-WAN has a provider run branch connectivity and routing policy. Weigh visibility, control and shared access before you sign, using NIST guidance.
What is managed detection and response (MDR) and what should you ask?
MDR is an outsourced service that watches your telemetry and responds to threats. Agree scope, response authority and reporting in writing before you sign.
What is IoMT security and what do medical device makers have to do?
IoMT security protects connected medical devices, from infusion pumps to monitors. In the US, FDA section 524B and its guidance shape what makers show.
What is fast flux, and how do you detect it in DNS?
Fast flux rotates the IP addresses behind a domain every few minutes so blocklists fail. Learn single versus double flux and which DNS signals expose it.
What is end user experience monitoring and what should it measure?
End user experience monitoring measures what real people see: load time, errors and responsiveness. Use browser timing APIs and respect privacy.
What is endpoint detection and response (EDR) and how does it work?
EDR records endpoint activity, flags suspicious behavior and lets responders isolate a device. See how it differs from antivirus and what it needs.
What is eavesdropping in cybersecurity and how do you prevent it?
Eavesdropping is secretly capturing data in transit or in conversation. Learn the common forms, why encryption defeats most of them and what to audit.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.