Security Guides
Timelocks explained: a delay between approval and execution
What a timelock does for admin power over a contract, how proposer, executor and admin roles fit together, and the mistakes that defeat the delay.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Should you measure time to remediate by finding source?
Yes. Dependency, code, container and secret findings fix at different speeds. Segment time to remediate by source so one slow type is not hidden.
Oct 18, 20263 min read
Security Guides
How do I tier services before setting vulnerability fix deadlines?
Tier services by exposure, data and business impact first, then set fix deadlines per tier. A simple three tier model with criteria and a template.
Oct 18, 20263 min read
Security Guides
Asset, threat, vulnerability, countermeasure: what do the terms mean?
Plain definitions of asset, entry point, trust level, threat, vulnerability and countermeasure as used in threat modeling, with a short worked example.
Oct 18, 20263 min read
Security Guides
What is the Threat Modeling Manifesto and what does it say?
The Threat Modeling Manifesto in plain words: five values, four principles and four anti-patterns, and how a development team can apply each one.
Oct 18, 20263 min read
Security Guides
What should a threat model document contain? A one page template
A one page threat model template: scope, diagram, threat table with response, owner and status, plus accepted risks. Based on OWASP documentation guidance.
Oct 18, 20264 min read
Security Guides
How do you threat model OAuth sign in using RFC 9700?
Use RFC 9700, the OAuth 2.0 security best current practice, as a threat checklist: redirect URIs, PKCE, implicit grant, refresh tokens, mix-up, audience.
Oct 18, 20264 min read
Security Guides
How do you threat model tenant isolation in a multi-tenant SaaS?
Model tenant isolation by tracing where tenant context is set, stored and lost: requests, database, cache, background jobs, rate limits and keys.
Oct 18, 20264 min read
Security Guides
How do you threat model a mobile app? Areas to check first
Threat model a mobile app: draw device, network and backend, then check storage, transport, deep links, authentication and tampering using OWASP guidance.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.