Safeguard
Resources

Supply Chain Security, in plain English.

Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.

All (5118)Vulnerability Analysis (12009)Security Guides (5118)Application Security (3307)Developer Tools (2961)Compliance (2830)AI Security (1720)Supply Chain (1423)Supply Chain Security (1025)Industry Analysis (1005)Research (585)Security (532)DevSecOps (511)Product (509)Tool Comparison (454)Open Source Security (417)Incident Analysis (399)AppSec (309)Cloud Security (300)Container Security (287)Software Supply Chain (282)Best Practices (264)Open Source (252)Buyer's Guides (217)Software Supply Chain Security (182)Vulnerability Management (150)Regulatory Compliance (144)Ranking (116)Concepts (116)Containers (100)Supply Chain Attacks (93)SBOM (77)Vulnerabilities (74)Threat Intelligence (66)Infrastructure Security (65)FAQ (50)Tools (50)SBOM & Compliance (41)Comparisons (36)Engineering (29)Licensing (26)Ransomware (24)Tutorials (24)SecOps (22)Guides (22)Kubernetes Security (22)Vulnerability Guides (20)Regulation (20)Industry Guides (19)Case Studies (18)Compliance & Regulations (18)Emerging Technology (17)Solutions (17)Risk Management (16)Vulnerability Response (16)Tool Reviews (16)Agent Security (16)Threat Research (16)Compliance & Frameworks (15)Incident Response (15)Identity Security (15)Cryptography (15)Security Concepts (15)Industry Events (14)Security Strategy (13)Frameworks (12)Web Security (11)Data Breach (11)Dependency Security (11)Career (10)Security News (10)Buyer Guides (10)Culture (9)Enterprise (9)Company (9)Architecture (8)Standards (8)Vulnerability Research (8)Strategy (8)Secure Development (7)Industry Insights (7)Industry Trends (7)Zero-Day Exploits (7)Network Security (7)How-To Guide (7)Dependency Management (7)Vendor Comparison (6)Security Operations (6)Organizational Security (6)Developer Security (6)Industry (6)Dev Practices (6)Code Security (5)Breach Analysis (5)Cryptocurrency Security (4)Product Launch (4)Mobile Security (4)Policy (4)Offensive Security (4)Tool Comparisons (4)Healthcare Security (3)Governance (3)Social Engineering (3)Hardware Security (3)Build Security (3)Policy & Compliance (3)API Security (3)Regional Security (3)Startup Security (3)Analysis (3)SBOM Standards (2)DeFi Security (2)Industry News (2)Security Architecture (2)Security Management (2)SBOM and Compliance (2)Zero-Day Analysis (2)Release (2)Security Culture (2)Threat Actors (2)Tools & Platforms (1)Tools & Techniques (1)Events (1)Architecture Security (1)Career Development (1)Browser Security (1)SBOM & Standards (1)Incident Postmortem (1)Kubernetes (1)Nation-State Threats (1)Language Security (1)Perspectives (1)Privacy & Security (1)Threat Analysis (1)Runtime Security (1)Emerging Threats (1)Threat Modeling (1)Healthcare (1)Data Security (1)Safeguard runs on VR and mixed reality headsets. Where a spatial view of your software estate helps, and where a plain screen is still better. (1)PKI Security (1)Privacy (1)Product Update (1)Technical (1)Lifecycle Management (1)Credential Attacks (1)Business Continuity (1)

Articles

RSS feed
Security Guides

What should a GraphQL API return when a query fails in production?

GraphQL errors can leak stack traces and internals. Here is what to return to clients, what to log server side, and how to check your error settings today.

Oct 18, 20264 min read
Security Guides

GraphQL depth limit, amount limit or cost limit: which do you need?

Depth, amount and cost limits stop different GraphQL denial of service attacks. Here is what each one catches, what it misses, and how to pick.

Oct 18, 20265 min read
Security Guides

Why does govulncheck report fewer issues than my dependency scanner?

govulncheck reports only vulnerabilities whose functions your Go code can reach, while version matching lists every affected module. How to compare.

Oct 18, 20263 min read
Security Guides

Google Workspace API controls: trusted, limited and blocked apps

How Google Workspace API controls classify third party apps as trusted, limited or blocked, and how restricting a service changes what users can grant.

Oct 18, 20263 min read
Security Guides

Google Family Link: what it can and cannot supervise

Family Link manages a child's Google account, apps, screen time and Chrome. It also has gaps on iPhones and some computers. Here is where the limits are.

Oct 18, 20263 min read
Security Guides

Transferring Google Drive ownership when an employee leaves

How admins transfer a departing user's Drive files in Google Workspace, what moves and what does not, and why access stays unchanged after the transfer.

Oct 18, 20263 min read
Security Guides

Google Drive external sharing settings for a small company

Which Google Workspace Drive sharing controls to set first: external sharing, allowlisted domains, visitor sharing, warnings and shared drive limits.

Oct 18, 20263 min read
Security Guides

Google Advanced Protection Program: who should enroll and what changes

Google's Advanced Protection Program suits people at elevated risk of targeted attacks. What it requires, what it restricts, and who can skip it.

Oct 18, 20263 min read
Security Guides

What is a good way to secure open source dependencies?

A practical order of work for securing open source dependencies: inventory, lockfiles, scanning, prioritisation, and fix workflow, and what you can skip.

Oct 18, 20264 min read

Stay informed

Weekly insights on software supply chain security, delivered to your inbox.

We email you a link to confirm, and only then add you to the list. Unsubscribe in one click. Privacy

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.