Security Guides
Which leaked secret alert do you fix first? A triage guide
Sort secret scanning alerts by whether the credential is live, how much it can reach, and where it leaked. A simple order that keeps the queue moving.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Triaging fuzzer crashes: dedupe, minimize, reproduce, assign
A fuzzer can save hundreds of crash files. A five step routine to group duplicates, shrink the input, reproduce it, and hand it to the right owner.
Oct 18, 20264 min read
Security Guides
Triage a fuzzer crash: reproduce, minimize, deduplicate
What to do when a fuzzer reports a crash: reproduce it, shrink the input, group duplicates, judge the impact, then fix and keep the input as a test.
Oct 18, 20263 min read
Security Guides
A vulnerable transitive dependency will not upgrade: what are your options?
When a vulnerable library is buried inside another package, try an override, a parent upgrade, a patch or a replacement before accepting the risk.
Oct 18, 20263 min read
Security Guides
How do you hand an npm package to a new maintainer safely?
To hand over an npm package, add the new owner, let them publish a test release, then remove yourself. Steps, the npm owner commands, and handover checks.
Oct 18, 20263 min read
Security Guides
Tokenization, encryption or pseudonymization for a PII field?
How to choose between field encryption, tokenization and pseudonymization for personal data, with a short decision guide and the trade offs of each.
Oct 18, 20263 min read
Security Guides
Token approvals and wallet hygiene for teams that hold crypto
Practical wallet rules for teams: limit token approvals, keep recovery phrases offline, verify before signing, and separate treasury from daily keys.
Oct 18, 20263 min read
Security Guides
Turning off TLS verification in code: why it ships and what to do
verify=False and similar flags remove the protection TLS gives you. Why they stay in production, how to find them, and the safer fixes for dev and test.
Oct 18, 20263 min read
Security Guides
TLS termination at the proxy: do you need to encrypt the backend hop?
A decision guide for TLS termination: terminate only, re-encrypt, or pass through. What each option protects, hides from the proxy, and what to verify.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.