Security Guides
62 KEV entries have EPSS under 1%: who they are and what to do
Of 1,747 KEV CVEs with EPSS scores, 62 sit under 1%, many added in 2026 or on mobile platforms. What a low score on a known exploited flaw means.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How many KEV additions a day? The real size of the watch job
Since January 2025 CISA added KEV entries on 237 days, about 2 per addition day. A 15 minute daily check is enough for most small teams to keep up.
Oct 18, 20263 min read
Security Guides
Kernel livepatch: what it fixes and what still needs a reboot
Livepatching redirects fixed kernel functions without a reboot. See how it works, its documented limits, and why you still schedule reboots.
Oct 18, 20264 min read
Security Guides
Kerberos vs NTLM: which Windows protocol is your app using?
Kerberos uses tickets and mutual authentication, NTLM uses challenge response. Learn when each is used, why NTLM lingers, and how to find it in your apps.
Oct 18, 20264 min read
Security Guides
How do you keep an approved package list from going stale?
Approved lists rot when nobody owns them. Give each entry an owner, a review date and a retirement rule, and measure use. Here is a simple routine.
Oct 18, 20264 min read
Security Guides
k-anonymity explained for developers, with its limits
k-anonymity means every record shares its quasi-identifiers with at least k others. How to check it in a dataset, and where it fails to protect people.
Oct 18, 20263 min read
Security Guides
What should a Gradle supply chain review check? A ten question list
A ten question review for Gradle and Kotlin builds: repositories, plugins, versions, locking, verification, build logic, cache, JDK and inventory.
Oct 18, 20264 min read
Security Guides
Just in time or annual: which security training works for developers?
Annual training sets a baseline and proves coverage. Just in time training teaches at the moment of a mistake. Use both; a table shows how to split them.
Oct 18, 20263 min read
Security Guides
Jupyter server on a network: a hardening checklist
Access to a Jupyter server means running code on its host. A checklist covering tokens, passwords, authorization, TLS and who can reach the port.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.