Security Guides
Can policy control extensions in Firefox private browsing?
Firefox 136 and ESR 128.8 added a private_browsing field to ExtensionSettings. What it does, why it matters for sensitive sessions, and how to test it.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How do you find who still calls a deprecated API before removing it?
Before retiring an insecure endpoint, measure who still calls it by version, client and key, and warn them with Deprecation and Sunset headers.
Oct 19, 20264 min read
Security Guides
How do you find every build system in a legacy monorepo?
Before onboarding a security scanner, list every build system in the monorepo. A simple file census shows which ecosystems need support and where gaps are
Oct 19, 20264 min read
Security Guides
How do you find forgotten GraphQL, gRPC and event endpoints?
Old API versions and test hosts often skip the controls on production. A practical inventory method for GraphQL, gRPC and message broker endpoints.
Oct 19, 20264 min read
Security Guides
What does the final Docker stage need for Node.js, Python, Java and Go?
A side by side guide to what belongs in the runtime stage for each language and what should stay in the build stage, with a table you can use in reviews.
Oct 19, 20264 min read
Security Guides
What fields belong in a vulnerability report tracking record?
A simple case record for inbound vulnerability reports: the fields that keep response times honest and make advisories and audits easy later.
Oct 19, 20264 min read
Security Guides
How do Sec-Fetch headers help block cross-site requests?
Fetch metadata headers like Sec-Fetch-Site let your server reject cross-site requests. See the values, a resource isolation policy and the Vary caveat.
Oct 19, 20264 min read
Security Guides
How do Fastify trustProxy and rate limit keys work behind a proxy?
Fastify rate limits key on request.ip, which depends on trustProxy. Get it wrong and everyone shares one bucket or clients forge their own. Fix it here.
Oct 19, 20263 min read
Security Guides
Why does Fastify rate limiting need Redis when you run several instances?
The Fastify rate limit plugin keeps counts in memory by default. Run more than one server and each enforces its own limit. Here is how to share the count.
Oct 19, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.