Developer Tools
Android network security config: defaults by API level
Android's network security config sets cleartext and trust anchor rules. The defaults by target API level, and the settings that quietly weaken them.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedDeveloper Tools
Android Keystore: what it protects and what it does not
Android Keystore stops key extraction, not key misuse by a compromised app. What hardware backing, StrongBox and user authentication binding really add.
Oct 18, 20264 min read
Developer Tools
Android certificate pinning: expiry dates and backup pins
Pinning in Android's network security config can lock users out or lapse after expiry. How pin sets work, why backup pins matter, and when to pin.
Oct 18, 20264 min read
Developer Tools
Android biometric login: crypto-bound or callback only?
A biometric prompt that only returns success is easy to bypass on a compromised app. How CryptoObject and auth-bound keys make the check count.
Oct 18, 20263 min read
Developer Tools
Anatomy of an OpenVEX document, field by field
A field by field walk through a minimal OpenVEX document: which fields are required, which are optional, and what each one tells the consumer.
Oct 18, 20263 min read
Developer Tools
Alert runbook template: what to write for the 3am reader
A one page runbook template for any alert: what it means, user impact, first checks, safe fixes, escalation and how to close the loop afterwards.
Oct 18, 20263 min read
Developer Tools
Alert on symptoms, not causes: a rule for fewer false pages
Why paging on user-visible symptoms beats paging on causes like high CPU, with examples of what to page on and what to leave on a dashboard.
Oct 18, 20263 min read
Developer Tools
AI cost guardrails: a launch checklist for engineering teams
A pre launch checklist for any feature that calls an LLM: budgets, limits, caching, metering, loop caps and ownership, so the first bill is no surprise.
Oct 18, 20263 min read
Developer Tools
Why AI assistants suggest outdated libraries and what to do about it
Models learn from code written in the past, so they can recommend old versions and deprecated APIs. How to catch stale suggestions before they ship.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.