observability
Safeguard articles tagged "observability" — guides, analysis, and best practices for software supply chain and application security.
24 articles
Your Health and Metrics Endpoints Describe Your System to Anyone Who Asks
Nobody designed them. A framework, a platform team or a monitoring integration added them, they were configured once, and they are the endpoints that describe your architecture most accurately.
The Agents on Your Hosts Have More Access Than Your Application
Four agents on every production host, each running as root or with kernel privileges, each auto-updating from its vendor, each sending data outward. Your application dependencies are pinned and scanned. These are neither.
Your Logs Are the Least Protected Copy of Your Most Sensitive Data
Nobody writes log.info(password). The leaks come from logging whole request bodies, exception objects, header maps and serialised domain objects, into a store replicated everywhere and retained for a year.
When Automated Agents Share One Deploy Lock
Three agents, one lock, every one of them correct in isolation. The service restarts every few minutes for an hour and there is no bug to find, because the harmful behaviour only exists in aggregate.
Is It Working or Is It Stuck? Long-Running Jobs Need a Progress Signal
CPU, connection counts, process liveness and log volume are all proxies that decouple from reality in exactly the case you are trying to detect. One timestamp fixes it: when the last unit of work completed.
The Shard Ceiling Turns Failed Writes Into Empty Reads
A search cluster at its shard limit stops creating indices. The read path cannot tell a missing index from no matching documents, so both return an empty list with a 200. Dashboards show zero and nothing pages.
What Is Application Security Monitoring and How Do You Do It Well?
Application security monitoring is the continuous observation of an application's behavior to detect attacks, abuse, and security failures as they happen. Here is what to monitor and how to make signals actionable.
Piping security findings into your observability stack
OCSF just cleared ITU review for ratification by June 2026 — here's how to route vulnerability and scan data into Datadog or New Relic without drowning your on-call rotation.
Best software supply chain observability tools
A practical, no-hype buyer's guide to software supply chain observability tools -- evaluation criteria, an honest roundup of six real vendors, and where Safeguard fits.
What Is Security Logging?
Security logging records security-relevant events so activity can be monitored, investigated, and audited. Learn what to log, how it works, and the common pitfalls.
DevOps Metrics Tools: What to Track and How to Measure It
DevOps metrics tools collect and visualize the delivery and reliability signals that tell you whether your engineering system is actually improving. Here is what to measure and with what.
DevOps Performance Metrics That Also Measure Security
The DevOps performance metrics worth tracking are the four DORA metrics plus a handful of security signals that reveal whether speed is coming at the cost of risk.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.