Security Guides
SPF record mistakes checklist: eight errors to look for
A checklist of common SPF record mistakes, from two records on one name to ptr and +all, with the RFC 7208 rule behind each and the fix.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
SPF vs DKIM vs DMARC: what each one proves about an email
SPF checks the sending server, DKIM checks a signature on the message, and DMARC ties them to the From address. A short answer with a comparison table.
Oct 18, 20263 min read
Security Guides
The SPF 10 DNS lookup limit and the permerror it causes
SPF allows at most 10 DNS-querying terms per check. Go over and the result is permerror. Here is what counts, what does not, and how to get back under.
Oct 18, 20263 min read
Security Guides
SonicWall's cloud backup incident: what to do when config files leak
SonicWall first said fewer than 5 percent of firewalls were in scope, then said all cloud backup customers were affected. What leaked and how to respond.
Oct 18, 20263 min read
Security Guides
SMTP envelope sender vs header From: why they differ
Email has two senders: the envelope MAIL FROM that routes and bounces mail, and the From header people see. Why they differ and what that means for spoofing.
Oct 18, 20264 min read
Security Guides
A prompt injection smoke test you can run before every release
A small, repeatable prompt injection smoke test with dummy data and clear pass criteria, built from OWASP guidance, to run on every model or prompt change.
Oct 18, 20263 min read
Security Guides
SmartScreen warning on an unsigned installer: what to do
Windows SmartScreen warns on installers without a known reputation. Why it happens, the safe checks to run first, and when Run anyway is reasonable.
Oct 18, 20263 min read
Security Guides
Smart home purchase checklist: ten questions before you buy
Ten questions to ask before buying a smart device: update period, passwords, reporting route, remote access, local control and end of support.
Oct 18, 20263 min read
Security Guides
A smart device that can no longer be updated: what now?
When a smart device reaches end of support, what the options are: retire it, limit what it can do, or replace it. Plus what makers should plan for.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.