Security Guides
How do you follow Jenkins security advisories and act on them?
Subscribe to the Jenkins advisories list or RSS feed, watch in app notices, and triage each advisory. A repeatable weekly routine for legacy CI.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How do I find zero-day vulnerabilities in my dependencies?
You cannot look up a true zero-day, but you can be ready for one. Keep a live dependency inventory, watch advisory feeds and match new entries fast.
Oct 18, 20264 min read
Security Guides
How do I find vulnerable dependencies in my project?
Find vulnerable dependencies by listing every package at its exact version, checking each against advisory data, and reading direct findings first.
Oct 18, 20263 min read
Security Guides
How do I find forgotten API hosts and old versions before attackers do?
Find forgotten API hosts and old versions by building an inventory from gateways, DNS, code and traffic, then testing every version, not just the newest.
Oct 18, 20263 min read
Security Guides
How do you find services that need a restart after a library update?
Updating a library on disk does not fix a process still running the old copy. Use needrestart or dnf needs-restarting to find what to restart.
Oct 18, 20264 min read
Security Guides
How do you find Lambda functions on a deprecated runtime?
List every function and version on a given runtime with one AWS CLI query, then rank them by recent invocations. Steps, caveats and the tools AWS provides.
Oct 18, 20264 min read
Security Guides
How to evaluate zero-day detection claims from security vendors
Zero-day detection claims are hard to verify. Questions to ask, evidence to request and realistic expectations for finds made before an advisory exists.
Oct 18, 20263 min read
Security Guides
How do you evaluate a secure coding training vendor?
Judge a secure coding training vendor on outcomes, hands on labs, stack fit, content freshness and evidence export. A scorecard and demo questions.
Oct 18, 20264 min read
Security Guides
How do you detect when a third-party script has changed?
Hash the remote file on a schedule, alert on any change, read CSP and integrity reports, and review the diff. A monitoring loop for vendor scripts.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.