infrastructure-security
Safeguard articles tagged "infrastructure-security" — guides, analysis, and best practices for software supply chain and application security.
22 articles
Server Vulnerability Assessment: A Step-by-Step Guide
A server vulnerability assessment finds the missing patches, weak configs, and exposed services on your hosts before an attacker does. Here is how to run one that produces action, not noise.
What is Policy as Code
Policy as code turns security and compliance rules into version-controlled, testable code enforced automatically in CI/CD, admission control, and runtime.
What is Configuration Drift
Configuration drift silently pulls live systems away from their secure baseline — and it's behind some of the largest cloud data exposures on record.
What is GitOps Security
GitOps turns your Git repo into the source of truth for production, so one bad commit or stolen credential can mean a full cluster takeover.
Public key infrastructure (PKI)
What is PKI? A precise breakdown of public key infrastructure, the PKI certificate chain, root and intermediate CAs, and how trust hierarchies can break.
How to harden a Linux server
A step-by-step guide to harden Linux server security: SSH hardening, firewalls, patching, CIS benchmark alignment, and verification for production systems.
How to scan Terraform for misconfigurations with Checkov
A hands-on guide to running Checkov against Terraform, triaging findings, writing custom policies, and blocking IaC misconfigurations before they merge.
How to encrypt a Terraform state file
A step-by-step guide to encrypting a Terraform state file using an S3 backend, KMS keys, and IAM controls to keep infrastructure secrets safe.
How to configure DNSSEC
A practical, command-by-command guide to configure DNSSEC on managed and self-hosted DNS, verify the chain of trust, and prevent DNS spoofing across your supply chain.
Terraform Security Scanning: What to Scan, When, and How
A practical guide to integrating security scanning into your Terraform workflow without destroying developer productivity.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.