Security Guides
Rollback plan template for automated remediation
A fill in rollback plan for automated security fixes: triggers, owners, revert steps, kill switch, post deploy watch and the review after an incident.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How to roll out a pipeline security gate without blocking developers
A phased plan for adding a security gate to CI: observe first, warn on new issues only, then block on a narrow severity, with an owned exception path.
Oct 18, 20264 min read
Security Guides
Roll out a Kubernetes admission policy with Warn and Audit first
A ValidatingAdmissionPolicyBinding can Warn or Audit before it Denies. Use that to learn what a new rule would break, then switch to Deny with confidence.
Oct 18, 20263 min read
Security Guides
Role, ClusterRole, RoleBinding: what each Kubernetes RBAC object does
A Role or ClusterRole lists permissions. A binding hands them to users, groups or service accounts. Here is how the four RBAC objects combine in practice.
Oct 18, 20263 min read
Security Guides
Role based security training: who needs what
A simple split of security training by role: everyone, developers, admins, finance, support and executives, with topics and a time budget for each.
Oct 18, 20263 min read
Security Guides
A simple risk register template for a small security team
A ten column risk register you can build in an afternoon, with one worked example row and the mistakes that make small registers useless in practice.
Oct 18, 20263 min read
Security Guides
Revoked an OAuth app's permissions? Users can still re-consent
Revoking an app's granted permissions in Microsoft Entra does not stop users from consenting again. Here is what else to change so it stays revoked.
Oct 18, 20263 min read
Security Guides
Can you review vulnerability alerts from your phone safely?
A phone is fine for reading and triaging vulnerability alerts if the device is managed and you keep risky actions for a laptop. Here is the checklist.
Oct 18, 20265 min read
Security Guides
Reviewing security group rules in IaC pull requests
What to check when a Terraform or CloudFormation change touches an AWS security group: open CIDRs, ports, references to other groups and default egress.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.