Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
A GitHub repository was deleted by mistake or by an attacker. Here is the 90 day restore window, the fork network catch, and what to do while you wait.
Duplicate tests cost time and trust. How to decide which tests to delete, which to keep, and how to protect security checks while pruning.
Two scanners reporting the same vulnerable package creates two tickets. Use ownership rules, a shared key and one triage queue to cut the duplicates.
A practical walkthrough of openssl s_client: set the server name, view the certificates sent, force TLS 1.3, test STARTTLS and request OCSP status.
A minimal image has no shell, so kubectl exec fails. Use kubectl debug to attach a temporary container and keep the production image small. Steps inside.
A light routine for keeping dependencies healthy: a five minute daily check and a ten minute weekly review, with questions to ask and records to keep.
bom-ref links things inside one BOM, serialNumber identifies the BOM, and version counts revisions of it. Rules from the CycloneDX 1.7 JSON reference.
A JSON API that uses cookie auth can still be forged. Learn how a required custom header, strict CORS and token binding protect it, and where this breaks.
A token counting endpoint lets you estimate cost and fit before a request runs. Learn what it supports, what it skips, and how to build a budget gate.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
