Security Guides
mTLS or signed tokens between services: a decision guide
A practical comparison of mutual TLS and token-based service authentication, with the operational costs OWASP flags and a short guide to choosing.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Moving from a spreadsheet to a vulnerability management tool
How to move vulnerability tracking from a spreadsheet to a tool without losing history, owners or exceptions, in five practical steps and a caveat.
Oct 18, 20263 min read
Security Guides
How long should a new security policy stay in warn mode?
Keep a new policy in warn mode until its false positive rate is low and owners have a fix path, usually a few release cycles. Then enforce in steps.
Oct 18, 20264 min read
Security Guides
What belongs on a monthly security checklist for a small team?
A monthly checklist that fits an hour: inventory, accounts, updates, backups and a one-line report. What to check and what to leave for the quarter.
Oct 18, 20263 min read
Security Guides
Monorepo or separate repositories: a security decision guide
Git hosting grants access per repository. When a monorepo is fine, when sensitive code needs its own repository, and how to handle review and SBOMs.
Oct 18, 20263 min read
Security Guides
Should misconfigurations get the same fix deadline as CVEs?
A misconfiguration has no patch and no CVE, but can be worse than one. How to set fix deadlines for misconfigurations next to vulnerability SLAs.
Oct 18, 20263 min read
Security Guides
Minimum dependency security setup for a small team
A one afternoon baseline for a small team: lockfiles, one scanner in CI, a weekly update slot, secrets hygiene, and what to leave for later.
Oct 18, 20263 min read
Security Guides
How do you reduce the attack surface of a firmware image?
ETSI EN 303 645 provision 5.6 asks for unused interfaces off, only needed services on, and trimmed code. A practical checklist for firmware images.
Oct 18, 20263 min read
Security Guides
How do you move risk acceptances and exceptions to a new scanner?
Export old dismissals, re-validate each, re-apply them with owner, reason and expiry, and drop stale ones instead of copying everything blindly.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.