Developer Tools
Install the Safeguard Android APK and verify its checksum
Install Safeguard on Android from Google Play or the direct APK, and check the SHA-256 hash before you install. Commands for Mac, Linux and Windows.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Installing Claude Desktop: requirements for Mac, Windows, Linux
System requirements and install steps for Claude Desktop on macOS, Windows and Linux beta, plus what Cowork needs on Linux, from Anthropic's help center.
Oct 18, 20263 min read
Developer Tools
Input vs output tokens: how the price lists compare
Output tokens cost five or six times more than input tokens on public price lists from Anthropic, OpenAI and Google. See the ratios and what they mean.
Oct 18, 20263 min read
Developer Tools
innerHTML vs textContent: avoiding DOM XSS in plain JavaScript
Setting innerHTML with untrusted data is a classic DOM XSS sink. Use textContent for text, sanitize if you need markup, and know which sinks to audit.
Oct 18, 20263 min read
Developer Tools
Idempotency keys for payment APIs: retry without double charges
An idempotency key lets a client retry a payment request safely. How servers should handle repeats, mismatches and concurrent calls, and the security angle.
Oct 18, 20263 min read
Developer Tools
Choosing a hybrid TLS group: X25519, P-256 or P-384 with ML-KEM
The IETF defines three ML-KEM hybrid TLS groups. How to choose between X25519MLKEM768, SecP256r1MLKEM768 and SecP384r1MLKEM1024 for your requirements.
Oct 18, 20263 min read
Developer Tools
Hugging Face tokens for production and CI: fine-grained over read or write
Use fine-grained tokens, one per app, and avoid stored CI secrets where Trusted Publishers apply. A short guide to Hugging Face token hygiene.
Oct 18, 20263 min read
Developer Tools
The Vary header: when caches serve the wrong version
Vary tells caches which request headers change a response. Get it wrong and users see the wrong variant. A guide to Accept-Encoding, Vary star and safe defaults.
Oct 18, 20263 min read
Developer Tools
301, 302, 303, 307 or 308: choosing the right HTTP redirect
Which redirect status code to use: permanent or temporary, and whether the request method must be kept. A decision table for 301, 302, 303, 307 and 308.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.