Security Guides
Asset coverage percentage: what is the denominator?
A high coverage figure means little unless you know the denominator. Learn how to build a trustworthy asset list and report coverage honestly.
Oct 19, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Asset context or reachability: which should you apply first?
Apply exploit evidence first, then reachability, then asset context. Reachability removes findings and context orders the rest. Here is why.
Oct 19, 20264 min read
Security Guides
Which ASP.NET Core rate limiter should you use?
ASP.NET Core ships fixed window, sliding window, token bucket and concurrency limiters. Choose by endpoint cost, and partition with care to avoid DoS.
Oct 19, 20264 min read
Security Guides
How should an ASP.NET Core API handle errors in production?
Use UseExceptionHandler with AddProblemDetails in production, keep the Developer Exception Page for Development only, and log details server side.
Oct 19, 20264 min read
Security Guides
How do you set up HTTPS redirection and HSTS in ASP.NET Core?
Call UseHsts outside Development, then UseHttpsRedirection. HSTS defaults to 30 days, so start small, and expect a 307 redirect by default in ASP.NET Core.
Oct 19, 20264 min read
Security Guides
Does the Authorize attribute in ASP.NET Core check the object?
The Authorize attribute and fallback policy check who is calling, not who owns the record. What to look for in a controller review and the resource check.
Oct 19, 20264 min read
Security Guides
How do you find out what a scanner did not scan?
A scan that finds nothing may simply have read nothing. Ask a scanner demo for its skipped files list and compare it with your repository, step by step.
Oct 19, 20263 min read
Security Guides
How do you ask a license compatibility question so it gets answered?
Compatibility depends on four facts: both licenses and versions, how the code is combined, how you distribute, and who receives it. Gather them first.
Oct 19, 20263 min read
Security Guides
How do you trace one finding end to end in a scanner demo?
Ask a scanner demo to trace one finding from your file to the advisory and the fix. Six checkpoints show whether the tool explains its work or just reports.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.