Security Guides
Seven CISA tips for keeping children safe online, explained
CISA's seven tips for children's online safety, turned into plain household habits: shared spaces, clear limits, open talk, and limited accounts.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What does CISA's Secure by Demand guide tell software buyers to ask?
CISA's Secure by Demand guide gives buyers questions on patching, authentication, logging, SBOMs and disclosure. A plain summary you can use in a review.
Oct 18, 20263 min read
Security Guides
What are CISA's product security bad practices and how do I self-check?
CISA and FBI list 13 non-binding product security bad practices in version 2.0. A self-check table for software suppliers, grouped as the document does.
Oct 18, 20264 min read
Security Guides
CISA mobile guidance for highly targeted people: an executive checklist
CISA's mobile guidance for highly targeted individuals, turned into a one page checklist an executive can finish in an afternoon, with what to skip.
Oct 18, 20264 min read
Security Guides
Circuit breakers for contracts: how to design an emergency stop
How a pause switch limits damage in a live contract, who should be allowed to trigger it, and the design mistakes that turn a safety tool into a risk.
Oct 18, 20263 min read
Security Guides
chmod four-digit modes: setuid, setgid and sticky bit explained
What the leading digit in chmod 4755, 2775 and 1777 means, when each special bit is useful, and how to find setuid files that deserve a second look.
Oct 18, 20263 min read
Security Guides
Checksum or signature: which should you trust for a download?
A checksum shows a file matches a published value. A signature shows who produced it. Learn when each one helps and when one on its own proves very little.
Oct 18, 20263 min read
Security Guides
What should you check before shipping a security release on-prem?
A pre-ship checklist for a security release to self-hosted customers: version number, signatures, notes, advisory, upgrade test and rollback, in order.
Oct 18, 20263 min read
Security Guides
How do you check your stack against the CISA KEV file in ten minutes?
Download the free CISA KEV JSON or CSV, list the products you run and look for matches. A ten minute check a solo developer can repeat every week.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.