Security Guides
Training support staff to recognise and route security reports
Vulnerability reports often land in the support queue. How to train frontline staff to spot them, protect the details and escalate in minutes.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Track, Attend, Act: a simple scale for security news
Use the CISA SSVC outcomes of Track, Attend and Act as a shared vocabulary for deciding how hard to react to a breach or vulnerability story.
Oct 18, 20263 min read
Security Guides
The other on-call problem: too little exposure to real pages
A quiet pager has a cost too. Google's SRE guidance says engineers should be on call at least once or twice a quarter. How to keep skills fresh.
Oct 18, 20263 min read
Security Guides
Token introspection vs local JWT validation: which should an API use?
Local JWT checks are fast but blind to revocation. Introspection is current but adds a network call. How to choose, cache and combine them in practice.
Oct 18, 20263 min read
Security Guides
How TLS checks the hostname: SAN entries, wildcards, no CN
A TLS client matches the name you asked for against the certificate's subjectAltName entries. How wildcards work and why the Common Name fallback is avoided.
Oct 18, 20263 min read
Security Guides
A TLS baseline you can defend: key points from RFC 9325
A practical TLS baseline from RFC 9325: versions, cipher suites, key sizes, renegotiation, session tickets and certificate checks, in checklist form.
Oct 18, 20263 min read
Security Guides
TLS certificate lifetimes are shrinking to 47 days: what to do
CA/Browser Forum rules cut public TLS certificate validity to 200 days, then 100, then 47. The dates and a plan to automate renewal before it hurts.
Oct 18, 20263 min read
Security Guides
TLS 1.3 vs TLS 1.2: what to keep and what to turn off
Default to TLS 1.3, keep TLS 1.2 only for compatibility, and disable the old protocols and cipher suites. A short configuration guide with the reasons.
Oct 18, 20263 min read
Security Guides
TLS 1.3 0-RTT early data: the replay risk and when to avoid it
TLS 1.3 0-RTT early data speeds up resumed connections but can be replayed and is not forward secret. Learn when to leave it off and how to limit harm.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.