Research
In-depth guides and analysis on research from the Safeguard engineering team.
100 articles
What Is a Transit VPC and When Do You Need One?
A transit VPC is a hub that connects other VPCs and sites. A managed transit gateway now does this job. Learn how to segment it and when you need one.
What is a threat intelligence platform and do you need one?
A threat intelligence platform collects, normalizes and shares indicators and reports. Most teams need a clear use case and an owner before buying one.
What is a thin client and what does it change for security?
A thin client shows a session running on a server. It shrinks the endpoint but moves risk to the session protocol, sign-in and hosts. What to lock down.
What is a telemetry pipeline and when do you need one?
A telemetry pipeline receives logs, metrics and traces, processes them and routes them to storage. Learn the parts, the security risks and when to add one.
What is a site-to-site VPN and when should you use one?
A site-to-site VPN joins two networks with an encrypted tunnel between gateways. It suits fixed offices and cloud links but needs tight routing rules.
What is a site-to-site VPN and how does it work?
A site-to-site VPN joins two networks over the internet with an encrypted tunnel between gateways. Learn how IPsec does it, and what to configure and test.
What is a reverse proxy and why would you use one?
A reverse proxy sits in front of your servers and forwards client requests inward. It gives you TLS, caching, load balancing and one place for controls.
What is a remote access VPN and what should you check first?
A remote access VPN gives one user an encrypted tunnel into a private network. Before you rely on it, check authentication, patching, scope and logging.
What is a port scan and how do you detect or block one?
A port scan probes a host to learn which network ports answer. See how scans work, why attackers and defenders both run them, and how to spot one in logs.
What is a packet filtering firewall and where does it fall short?
A packet filtering firewall allows or drops traffic by address, protocol and port without tracking sessions. It is fast and simple but blind to content.
What is a network security vulnerability and how do you prioritize fixes?
A network vulnerability is a reachable weakness in a device, protocol, service or setting. Rank fixes by exposure, known exploitation and impact.
What is a hybrid data center and how do you secure it?
A hybrid data center joins on premises systems with cloud resources under shared management. Standardize identity, links, segments and logs first.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.