Security Guides
sshd Match blocks and sshd -T: see what a user really gets
Match blocks change sshd settings per user, group or address. Use sshd -T with -C to print the effective configuration and avoid a surprise lockout.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
SSH certificates vs authorized_keys: which fits a team
Compare per-server authorized_keys files with OpenSSH user certificates signed by a CA: expiry, principals, revocation and when each approach makes sense.
Oct 18, 20264 min read
Security Guides
How do you show root cause analysis under SSDF RV.3?
How to evidence SSDF RV.3 root cause analysis: record causes, spot patterns, hunt similar flaws, and show a change to your development process.
Oct 18, 20263 min read
Security Guides
What does SSDF PW.9 mean by secure settings by default?
What SSDF practice PW.9 asks for: a secure baseline for every security setting, secure defaults shipped, documented settings, and the evidence to keep.
Oct 18, 20263 min read
Security Guides
How do you secure development environments for SSDF PO.5?
What SSDF practice PO.5 asks for when securing build, test and dev environments and developer endpoints, with the evidence to keep for each task.
Oct 18, 20263 min read
Security Guides
Is SQLAlchemy text() safe? Bound parameters versus f-strings
text() is safe when values go in as bound parameters with :name placeholders. Building the SQL string with f-strings or format brings SQL injection back.
Oct 18, 20264 min read
Security Guides
Which password encoder does Spring Security use by default?
DelegatingPasswordEncoder, which prefixes each hash with an id so old and new formats can coexist. What the prefix means and how to upgrade hashes.
Oct 18, 20263 min read
Security Guides
Is CSRF protection on by default in Spring Security?
Yes. Spring Security checks CSRF tokens on unsafe methods such as POST by default. Here is what that covers, where tokens live, and what to confirm.
Oct 18, 20263 min read
Security Guides
Does rule order matter in Spring Security authorizeHttpRequests?
Yes. Spring Security applies only the first matching rule, in the order you list them. How to order rules, end with a catch all and test for gaps.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.