Security Guides
Passphrase-protected keys: the KEK and DEK pattern
Do not encrypt data directly with a key made from a passphrase. Derive a key-encrypting key, wrap a random data key, and change passphrases cheaply.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Myth vs fact: parental controls are enough to keep kids safe
Parental controls help but have real gaps: other browsers, other devices, school accounts. Where they fall short and what to add alongside them.
Oct 18, 20263 min read
Security Guides
pam_faillock: lock accounts after failed logins without a lockout DoS
faillock.conf sets how many failed logins lock an account and for how long. Defaults, root handling and why permanent lockouts help attackers.
Oct 18, 20263 min read
Security Guides
Security advisory for your own product: a template with the fields
A practical template for a security advisory about your own software: affected versions, fixed versions, severity, workarounds, credit and timing.
Oct 18, 20263 min read
Security Guides
OWASP Top 10, ASVS or WSTG: which one should you use?
The Top 10 raises awareness, ASVS lists requirements to build and verify against, and the WSTG explains how to test. Pick by the job you have.
Oct 18, 20263 min read
Security Guides
What are the OWASP Top 10 CI/CD security risks? A plain explainer
The OWASP Top 10 CI/CD Security Risks, CICD-SEC-1 to 10, in plain words with one practical check for each, so you can see where your pipeline is exposed.
Oct 18, 20264 min read
Security Guides
How do I test for the OWASP Top 10 (2025)? A testing map
Map each OWASP Top 10 2025 category to a test method: DAST covers misconfiguration and injection probes, while access control and design need manual work.
Oct 18, 20263 min read
Security Guides
Where does the OWASP Top 10 data come from, and why does it matter?
How the 2025 OWASP Top 10 was assembled from contributed testing data, CVE records and a community survey, and what that means when a tool claims coverage.
Oct 18, 20263 min read
Security Guides
What are the OWASP principles for security champions programs?
OWASP lists ten principles for champions programs, from a clear vision to planning for turnover. Here they are grouped, with what each means in practice.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.