Security Guides
How to read the Authentication-Results header in an email
Learn to read the Authentication-Results header: what spf, dkim and dmarc results mean, which fields to check, and how to debug a failed message.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Read a vendor security advisory: does it apply to you?
Read a vendor advisory in order: product and version, preconditions, fix or workaround, then record the result, including when it does not apply to you.
Oct 18, 20263 min read
Security Guides
How to read a DMARC aggregate report (rua) step by step
A DMARC aggregate report is gzipped XML sent daily. Learn what each section means, how to spot unknown senders, and what override reasons tell you.
Oct 18, 20263 min read
Security Guides
Read a CVSS vector string in two minutes
A CVSS vector like AV:L/AC:L/PR:L tells you how an attack works. Decode each part and see why the vector often matters more than the score.
Oct 18, 20263 min read
Security Guides
Reachable does not mean exploitable: reachability myths vs facts
Six common myths about reachability analysis, from reachable means exploitable to unreachable means safe, with what is actually true for triage.
Oct 18, 20263 min read
Security Guides
Reachability, EPSS, KEV and CVSS: which signal should come first?
Four signals rank vulnerabilities: CVSS, EPSS, KEV and reachability. Compare what each measures and a simple order for combining them in triage.
Oct 18, 20263 min read
Security Guides
Reachability glossary: entry point, call edge, sink and more
A plain glossary of the terms behind reachability analysis: call graph, call edge, entry point, sink, taint, symbol, false negative and VEX status.
Oct 18, 20263 min read
Security Guides
RBAC, ABAC or ReBAC: choosing an API authorization model
Roles struggle with object level and multi-tenant access. Compare RBAC, ABAC and ReBAC for APIs, with the OWASP principles that apply to all three.
Oct 18, 20263 min read
Security Guides
A quarterly Kubernetes RBAC review: stale users and bindings
Review RBAC for redundant entries, bindings to system:unauthenticated, wildcards and deleted users whose names could be reused. A checklist you can run.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.