Security Guides
Mid-market AppSec: when free tools stop being enough
Free scanners serve small teams well. Learn the signals that tell a mid-market company it has outgrown them, and what to look for in the next step up.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Block external auto forwarding in Microsoft 365: the three controls
Three Microsoft 365 controls decide whether mail can auto forward outside: outbound spam policy, remote domains and mail flow rules. How they combine.
Oct 18, 20263 min read
Security Guides
Microservice authorization: gateway checks or in-service checks?
Is it enough to authorize at the API gateway? A guide, based on OWASP guidance, to splitting edge checks and in-service checks without any gaps.
Oct 18, 20263 min read
Security Guides
MFA blocks 99.9 percent of attacks: what the claim does and does not mean
A famous Microsoft figure says MFA blocks over 99.9 percent of account compromise attacks. What the post actually says, its limits, and how to use it.
Oct 18, 20263 min read
Security Guides
MEV, front-running and sandwich attacks: a developer primer
What maximal extractable value means, how front-running and sandwich trades work against public transactions, and what builders can do about it.
Oct 18, 20263 min read
Security Guides
Which metrics show that a release gate is working?
Track block rate, override rate, time to clear a block, waiver age and post-release findings to see if the gate protects without stalling teams.
Oct 18, 20263 min read
Security Guides
What metrics show a security champions program is working?
Track leading signals such as time protected and findings triaged, and lagging ones such as repeat findings and fix time. A metric table with cautions.
Oct 18, 20263 min read
Security Guides
Messaging app takeover: fake security alerts and QR group invites
Attackers claim your messaging account is compromised, then trick you into handing over control. CISA's warning signs and a short verification routine.
Oct 18, 20263 min read
Security Guides
A memory safety roadmap checklist for product teams
CISA asks manufacturers to publish a memory safety roadmap. Here is a practical checklist for what to put in one, based on the guidance text.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.