severity
Safeguard articles tagged "severity" — guides, analysis, and best practices for software supply chain and application security.
4 articles
Deciding a Security Incident's Severity While You Still Know Nothing
Outage rubrics rate impact, which you can measure while it happens. A security incident's impact is unknown at the moment you must classify it, and often stays unknown for days. Rate the observation instead.
When One CVE Has Three Scores, Taking the Highest Is Not Caution
NVD says 9.9. The vendor says 7.0. CVSS v4 says 6.3. Collapsing that to 9.9 does not make you conservative — it discards the disagreement, which was the most informative thing you had.
CVSS Full Form: What Does CVSS Stand For?
The CVSS full form is Common Vulnerability Scoring System. Here is what the acronym means, how the 0-10 score is built, and how to use it without treating the number as gospel.
CVSS v4: What Changed and Why It Matters
CVSS v4 reworks how vulnerability severity is scored, dropping the confusing Scope metric and adding finer-grained inputs. Here is what actually changed from v3.1.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.