Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Jenkins credentials have scopes that decide who can use them. Learn System versus Global, folder level storage, and how to keep each secret narrow.
Jenkins Configuration as Code puts controller settings in reviewed YAML. Where it helps, where secrets can leak, and how to adopt it on an old controller.
The Jenkins CLI supports WebSocket, HTTP and SSH. How each works, how to authenticate with API tokens, and what to check before leaving it open.
No. Jenkins advises against builds on the built-in node. Set its executors to 0, run jobs on agents, and keep agent access to the controller locked down.
Use Jenkins API tokens for scripts, not passwords. Tokens skip the crumb dance, can be loaded from files, and are easier to scope and rotate.
A step by step runbook for a Log4j-style event in Java: find every copy, decide exposure, pin a fixed version, rebuild, redeploy and prove it is gone.
ISRG Root X1 is listed as trusted until 4 June 2030 by Let's Encrypt, and new roots are coming. What it means for apps with embedded trust stores.
OWASP lists Top 10 2025 as the current release. A six step check to see whether your training content references the right edition and covers what matters.
CISA says newer phone hardware carries security features software updates cannot add. How to check update support and when an executive should upgrade.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
