Security Guides
Inherited a codebase with old dependencies? A 30-60-90 day plan
New to a codebase with year old dependencies? Use this 30, 60 and 90 day plan to get visibility, fix urgent issues, plan majors and set a routine.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Ingress or Gateway API: what changes for security?
Gateway API splits infrastructure, operator and developer roles and limits which namespaces can attach routes. Here is what that means for security.
Oct 19, 20264 min read
Security Guides
Ingress NGINX retirement: how do you check if you use it, and what next?
Kubernetes announced Ingress NGINX retirement for March 2026, with no further security fixes. Here is how to check your clusters and plan the move.
Oct 19, 20264 min read
Security Guides
Incident, degradation or outage: which word should you use publicly?
Use outage only for a full outage. Otherwise say incident or service degradation, and review the external message in the postmortem meeting before sending.
Oct 19, 20263 min read
Security Guides
How should three teams hand off during a security incident?
In a security incident, security leads the investigation, platform contains and preserves evidence, and compliance keeps the timeline. Agree roles first.
Oct 19, 20264 min read
Security Guides
In what order should a scanner prioritize vulnerabilities?
Prioritize in this order: remove what cannot apply, promote what is exploited, then rank the rest by likelihood and impact. See a four-step method.
Oct 19, 20263 min read
Security Guides
Imported vs called: what gap does reachability analysis measure?
Importing a vulnerable package is not the same as calling its vulnerable function. Learn the gap reachability measures, with a Go example from its docs.
Oct 19, 20263 min read
Security Guides
Should you import every old suppression or start fresh after a switch?
Import only suppressions that are recent, justified and owned. Start fresh for the rest. A decision guide with four tests to sort old exceptions.
Oct 19, 20263 min read
Security Guides
Immutable image tags: registry setting or admission policy?
Registry tag immutability stops overwrites, digest pinning at admission fixes what runs. Compare both controls, their gaps and how to combine them.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.