Safeguard
Tag

hardening

Safeguard articles tagged "hardening" — guides, analysis, and best practices for software supply chain and application security.

32 articles

Compliance

CIS Benchmarks

A precise definition of CIS Benchmarks, how they differ from CIS Controls, and what compliance scanning against them looks like in real environments.

Feb 23, 20267 min read
DevSecOps

JFrog Artifactory Hardening Guide

Artifactory is the most common artifact repository in enterprise. It is also a default-permissive system where misconfigurations compound. A concrete hardening guide.

Feb 9, 20266 min read
Infrastructure Security

Apache Web Server Hardening Guide for Production Environments

Apache httpd still serves millions of websites. Its default configuration exposes information, accepts weak TLS, and enables features you probably do not need.

Feb 8, 20265 min read
Software Supply Chain Security

Post-Breach Supply Chain Hardening: Lessons from Real Incidents

After a supply chain breach, the remediation window is your best opportunity to implement controls that should have existed before the incident. This guide covers what to harden and in what order.

Jan 26, 20267 min read
Infrastructure Security

Nexus Repository Security Hardening: Beyond the Defaults

Sonatype Nexus is everywhere. Its default configuration is permissive. Here is how to lock it down for enterprise use.

Jan 21, 20266 min read
Best Practices

Container Image Hardening Checklist

A comprehensive checklist for hardening your container images, from base image selection to runtime protections, with practical Dockerfile examples.

Jan 20, 20266 min read
Application Security

Security Misconfiguration Checklist: The Low-Hanging Fruit Attackers Love

Misconfigurations are the easiest vulnerabilities to find and exploit. Here is a practical checklist for web servers, frameworks, cloud services, and databases.

Jan 14, 20266 min read
DevSecOps

Securing GitHub Actions: Hardening Your CI/CD Supply Chain

GitHub Actions is a powerful CI/CD platform — and a significant attack surface. Here's how to lock it down against supply chain threats.

Jan 13, 20266 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

hardening (Page 3) — Safeguard Blog