Security Guides
Teams external access vs guest access: what each one allows
External access lets people chat and meet across organizations without joining yours. Guest access adds them to teams. Here is how to set each safely.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Teach a teen to spot phishing: recognize, resist, delete
CISA's three step method for phishing, adapted for talking with a teenager: warning signs, what not to click, and how to check a message safely.
Oct 18, 20263 min read
Security Guides
How Take It Down removes explicit images without uploading them
Take It Down is a free NCMEC service for images taken before age 18. Here is how the hash method works, who can use it, and what it cannot do.
Oct 18, 20263 min read
Security Guides
Image tags or digests: which should you track across many services?
Tags can move and digests cannot. Learn which to record for fleet wide vulnerability tracking, when to pin, and how to avoid pinning forever.
Oct 18, 20263 min read
Security Guides
Tabletop exercise: loss of power at a water treatment plant
A one hour tabletop for a small water utility: power fails while the control network is also in doubt. Injects, questions and what to record.
Oct 18, 20263 min read
Security Guides
Table-driven unit tests for authorization rules
Write authorization checks as a table of who, action, resource and expected result, so every role gets tested and a deny case is never forgotten.
Oct 18, 20264 min read
Security Guides
Systemd service sandboxing: five directives to add first
Add NoNewPrivileges, ProtectSystem, ProtectHome, PrivateTmp and a non-root user to a systemd unit first. What each does, and what breaks when you add it.
Oct 18, 20263 min read
Security Guides
systemd DynamicUser=yes: what it turns on and what to watch
DynamicUser=yes gives a service a throwaway user and switches on several sandbox settings. See what it implies and the file ownership trap to avoid.
Oct 18, 20263 min read
Security Guides
System library or bundled copy: which is easier to keep patched in C?
Distributions backport fixes to system libraries, while a bundled copy waits for you. A decision guide for choosing between them in a C or C++ product.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.