Security Guides
Caddy automatic HTTPS: what it does and what it needs from you
What Caddy's automatic HTTPS handles, the ports, DNS and storage it needs, how issuers and challenges work, and the settings that turn it off.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Checklist: how do you update a C or C++ dependency after an advisory?
A step by step checklist for fixing a vulnerable C or C++ library: find every copy, pick the right update path, rebuild, verify and record the evidence.
Oct 18, 20263 min read
Security Guides
What is a business logic flaw in checkout? Ten questions to ask
Scanners miss flaws that abuse legitimate checkout steps. A definition, examples and ten review questions your team can run against a store.
Oct 18, 20263 min read
Security Guides
Is built-in GitHub or GitLab scanning enough, or do you need more?
A neutral checklist for deciding whether your source host's built-in security features cover you, based on documented limits, not vendor claims.
Oct 18, 20264 min read
Security Guides
Should you run AppSec in-house or outsource parts of it?
Decide what to run in-house and what to outsource in AppSec: a decision table covering triage, testing, reviews, training and incident work.
Oct 18, 20263 min read
Security Guides
Build or buy software composition analysis: an honest comparison
Can you assemble your own SCA from open scanners and public advisory data? What it takes, who it suits, and when buying costs less than maintaining it.
Oct 18, 20263 min read
Security Guides
Build or buy authentication: a decision guide for engineering managers
Should your team build login itself or use an identity service? Weigh ongoing ownership, security expertise, and lock in before you commit engineers.
Oct 18, 20263 min read
Security Guides
Build a personal data map from your schemas and code
A personal data map lists where each kind of personal data lives and flows. Build one from database schemas, API specs and code, then keep it current.
Oct 18, 20264 min read
Security Guides
Browser password manager or standalone app: a decision guide
CISA lists built-in browser managers as an option. A neutral guide to choosing between a built-in manager and a standalone app, by use case and recovery.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.