threat-modeling
Safeguard articles tagged "threat-modeling" — guides, analysis, and best practices for software supply chain and application security.
44 articles
What Is Threat Modeling?
Threat modeling is the structured practice of asking what can go wrong with a system before you build it, then designing controls to match. Here's the four-question framework, how to run a session, and where it fits supply chain security.
The Security Development Lifecycle (SDL): A Working Guide
The SDL turned security from a pre-release audit into a discipline applied at every phase of building software. What the lifecycle actually contains, where it came from, and how to run it without a Microsoft-sized team.
Threat Model Examples: Walkthroughs You Can Actually Copy
Concrete threat model examples for a web app, an API, and a CI/CD pipeline, using STRIDE and data flow diagrams to show how the process works end to end.
A Threat Modeling Example, Walked Through Step by Step
A concrete threat modeling example beats any amount of theory. We model a real feature, a file-upload API, with STRIDE and turn the findings into fixes.
Why Autonomous Coding Agents Need Their Own Threat Model
Coding agents run with real credentials and no pause button. Here is the threat model that treats them as autonomous infrastructure, not junior developers.
How to Run an Application Security Code Review That Catches Real Bugs
An application security code review is a targeted read of code for security defects. Here is a practical process that finds real issues without drowning in noise.
SDLC Security Best Practices for Every Phase
SDLC security best practices mapped to each phase of development — from threat modeling in design to dependency scanning in CI and monitoring in production.
Application Security Architecture: Design Patterns That Hold Up
Good application security architecture is a small set of repeatable patterns — trust boundaries, defense in depth, least privilege — applied consistently, not a document nobody reads.
What Is an Application Security Model, and How Do You Build One?
An application security model is the structured way you define, measure, and improve how your applications resist attack, usually expressed through a maturity model.
The Threat Modeling Process, Step by Step
Threat modeling answers four questions: what are we building, what can go wrong, what are we doing about it, and did we do enough? A concrete step-by-step process your team can run in an afternoon.
Security in Agile Development: A Practical Guide
Security in agile development works when it moves at sprint speed instead of blocking releases. Here is how to embed AppSec into backlogs, PRs, and pipelines without killing velocity.
A Threat Model Example, Walked Through Step by Step
The fastest way to understand threat modeling is to watch one built end to end — this walks through a real threat model example for a simple login and payment flow.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.