Security Guides
How do you run a security bug bash for your own team?
A security bug bash is a timed session where the team tries to break its own feature. Learn the rules, roles, scoring and how to triage what you find.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How do you run a release go/no-go meeting that includes security?
A 20 minute go/no-go meeting works when criteria are agreed in advance. Here is an agenda, who decides, what counts as a blocker, and the notes to keep.
Oct 19, 20264 min read
Security Guides
How do you pilot a golden path with one team first?
Pick one willing team, one journey and a four week window. A step by step pilot plan for a secure golden path, with exit criteria and a feedback loop.
Oct 19, 20264 min read
Security Guides
How do you run a monthly security upgrade day?
A monthly security upgrade day clears routine dependency fixes in one focused session. Steps for scope, roles, timing and the checks that make it safe.
Oct 19, 20264 min read
Security Guides
How do you run a dependency exception review board?
An exception review board needs a quorum, a standard request form, three possible outcomes and a rule on conflicts. Here is the format that stays small.
Oct 19, 20263 min read
Security Guides
How do I route security alerts by severity, hours and on-call?
Route security alerts by severity and exposure: page for urgent, chat for same day, ticket for the rest. A routing table, quiet hours and fallback rules.
Oct 19, 20263 min read
Security Guides
How can you rotate RPA credentials without breaking the bots?
Fetch credentials from a store at run time, rotate on a schedule, and stagger the switch so a failed change affects one bot. Here is the sequence.
Oct 19, 20264 min read
Security Guides
How do you rotate JWT signing keys without breaking clients?
Publish the new key in your JWKS first, sign with it later, and keep the old public key until old tokens expire. Steps, timing and the kid header.
Oct 19, 20264 min read
Security Guides
How do I respond when a secret leaks into a CI build log?
Revoke and replace the credential first, then delete the log, then check how it was used. A step by step runbook a small team can follow in under an hour.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.