Security Guides
Myth vs fact: cloud storage is private by default so it is safe
New buckets are private by default on AWS and Azure, yet exposures still happen. Separate the myths from the facts about cloud storage defaults.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Prioritise vulnerabilities with KEV, EPSS and reachability
Three signals that shrink a long vulnerability list: CISA KEV for known exploitation, EPSS for likelihood, and reachability for whether your code calls it.
Oct 18, 20263 min read
Security Guides
PrintNightmare: why disable Print Spooler on systems that do not print
PrintNightmare (CVE-2021-34527) hit the Windows Print Spooler. CISA's mitigation was to disable it on domain controllers and non-printing systems.
Oct 18, 20263 min read
Security Guides
Primary vs secondary sources in security news: what to trust
Security stories get retold fast. Learn which sources to open first, how to trace a claim to its origin and when a retelling is good enough to act on.
Oct 18, 20263 min read
Security Guides
Price oracle manipulation explained, with defences that help
A smart contract is only as honest as the price it reads. How oracle manipulation works and which defences reduce it: multiple sources, TWAPs and limits.
Oct 18, 20263 min read
Security Guides
Prevent leaked LLM keys: push protection, scanning and spend limits
Most leaked LLM keys come from commits, notebooks and logs. Four layers that stop a leak, limit its cost and make the next one easier to spot.
Oct 18, 20263 min read
Security Guides
Preserving incident evidence for 90 days under DFARS 7012
DFARS 7012 asks contractors to preserve images and monitoring data for at least 90 days after a report. How to prepare retention and chain of custody.
Oct 18, 20263 min read
Security Guides
Why a commodity malware infection can be an early ransomware warning
CISA lists QakBot, Emotet and Bumblebee as common ransomware precursors. Why a malware cleanup should be treated as a possible ransomware incident.
Oct 18, 20263 min read
Security Guides
Precision versus recall: how to pick a detection threshold
Raising a detection threshold buys precision and costs recall. A worked example shows how to choose using cost per extra true finding instead of gut feel.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.