Security Guides
Who should approve a new open source dependency?
Approval should follow risk: automatic for low risk, a named reviewer for medium, a panel for high. Here is a tier table and how to keep a fast lane open.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
STRIDE, PASTA, LINDDUN or attack trees: which method fits?
A decision table for choosing a threat modeling method: STRIDE for design threats, LINDDUN for privacy, attack trees for goals, PASTA for business context.
Oct 18, 20263 min read
Security Guides
Which test type catches which security bug class?
A decision guide mapping bug classes such as injection, broken access control and memory errors to the test type most likely to catch each one.
Oct 18, 20263 min read
Security Guides
Which security test finds what? A coverage table for six methods
SAST, dependency scanning, DAST, pen tests, bug bounties and red teams each find different problems. A plain table shows what each covers and misses.
Oct 18, 20264 min read
Security Guides
Which security test do you need after a big change or incident?
A decision table matching common trigger events, such as a launch, a customer request or a new zero day, to the security test that answers the question.
Oct 18, 20263 min read
Security Guides
Which scanner checks container images? Questions to ask first
What to ask when choosing a container image scanner: OS and app layers, base image advice, registry and CI fit, noise handling, and when free is enough.
Oct 18, 20263 min read
Security Guides
Which scan type covers which part of an LLM app?
Map SAST, dependency scanning, secrets, container, API and web tests to the parts of an LLM app, and see what no scanner covers: model behavior.
Oct 18, 20263 min read
Security Guides
Which sandbox should run untrusted code: container, gVisor or microVM?
A plain container shares the host kernel. An application kernel, a microVM or a full VM adds a boundary. Choose by how hostile the code is and what you can afford.
Oct 18, 20264 min read
Security Guides
Which Python versions still get security fixes in October 2026?
Python 3.10 reached end of life on 1 October 2026. See which versions get security fixes, what each status means, and how to plan an upgrade.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.