Developer Tools
Per-user limits for LLM features beyond provider rate limits
Provider rate limits protect the provider, not your customers from each other. How to set per-user request, token and spend limits in your own app.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Paying for speed and location: priority, fast and residency prices
Faster and regional processing carry price multipliers on public AI price lists. Dated examples from Anthropic, OpenAI and Google, and how to budget.
Oct 18, 20263 min read
Developer Tools
How to build a paved road of secure design patterns
A paved road is a set of approved libraries, templates and patterns that make the secure way the easy way. Start with auth, logging and data access.
Oct 18, 20263 min read
Developer Tools
Passkey account recovery: how to design it without a weak back door
Passkeys make sign-in strong, but recovery decides your real security. Options for lost devices, and what to avoid so recovery is not the weakest link.
Oct 18, 20263 min read
Developer Tools
Can you parameterize ORDER BY and table names in SQL?
Placeholders only bind values, not identifiers or sort direction. Use a code side allowlist or a typed switch to keep dynamic ORDER BY safe from injection.
Oct 18, 20263 min read
Developer Tools
Page, ticket or dashboard: choosing where each alert goes
Route alerts by urgency: page for urgent user harm, ticket for slow burns, dashboard for context. Three questions sort most alerts in a minute.
Oct 18, 20263 min read
Developer Tools
package.json, requirements.txt or an SBOM: which file to scan?
The free scan accepts three kinds of file. Which one gives the most accurate result, and why a lockfile or SBOM beats loose version ranges.
Oct 18, 20263 min read
Developer Tools
Optional permissions: a safer default for extension developers
Use optional permissions and activeTab to ask for access only when needed. Why it builds trust, limits damage, and how to design the request flow.
Oct 18, 20263 min read
Developer Tools
OpenTelemetry Collector: redaction and filtering for security
Use the OpenTelemetry Collector to drop noisy telemetry and mask sensitive values before storage, and harden the collector itself so it is not a weak link.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.