Security Guides
How should you back up a system you cannot patch?
For a system you cannot patch, recovery still works after an attack. What to back up, how to protect the copies, and how to test a full restore.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How do you backtest an AI remediation tool on ten past vulnerabilities?
Before trusting AI fixes on live code, replay ten vulnerabilities your team already fixed and compare. A simple backtest design with a scoring sheet.
Oct 19, 20264 min read
Security Guides
Should you backport security fixes to an old design system major?
Backport security fixes to an old design system major only for a stated support window, and tell teams the end date. A policy template and trade offs.
Oct 19, 20264 min read
Security Guides
Is the vulnerability backlog shrinking? Use an inflow and outflow chart
A backlog total can stay flat while work piles up. An inflow and outflow chart shows new findings against closed ones, so you can see the real trend.
Oct 19, 20264 min read
Security Guides
Twelve-factor backing services: what attached resources mean for security
Treating databases, queues and third-party APIs as attached resources changes how you rotate credentials and limit blast radius. Here is how to apply it.
Oct 19, 20264 min read
Security Guides
How do you back test scanners with an old commit and a known advisory?
Check out an old commit where a dependency was known to be vulnerable, scan it with each tool and see who flags it. A cheap ground truth for your code.
Oct 19, 20264 min read
Security Guides
Which Azure Functions runtime and .NET models are out of support?
Azure Functions supports only runtime v4. Version 1 ended on 14 September 2026 and the .NET in-process model ends on 10 November 2026. What to check.
Oct 19, 20264 min read
Security Guides
Which request body limit should an axum service use?
axum's DefaultBodyLimit caps extractors at 2 MB, but only extractors. Add tower-http RequestBodyLimitLayer when you need a hard global size cap.
Oct 19, 20264 min read
Security Guides
AWS CLI SSO login or long-lived access keys for local development?
AWS advises temporary credentials for people. The CLI supports IAM Identity Center sign-in and renews credentials during a session. Here is how to switch.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.