Security Guides
How pg_hba.conf works: first match wins, and what that means
PostgreSQL checks pg_hba.conf top to bottom and stops at the first matching line. Learn the record format, safe ordering, and how to test changes.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Permissions-Policy header: turn off browser features you never use
Permissions-Policy lets a page disable camera, microphone, geolocation and more for itself and its iframes. Syntax, allowlists and how it pairs with allow.
Oct 18, 20263 min read
Security Guides
Pentest vs vulnerability scan: which one do you need?
A vulnerability scan finds known issues quickly and often. A pentest tests whether issues can be chained into real access. How to choose and combine them.
Oct 18, 20263 min read
Security Guides
Pentest scoping checklist: what to settle before kickoff
A penetration test is only as useful as its scope. A checklist of goals, targets, rules of engagement, data handling, timing and reporting to agree first.
Oct 18, 20263 min read
Security Guides
Penetration test preparation checklist: what to do before testing starts
A checklist for the two weeks before a penetration test: environments, accounts, contacts, backups and monitoring, so testers spend time on findings.
Oct 18, 20263 min read
Security Guides
From pentest report to fixed tickets: a practical workflow
How to turn a penetration test report into tracked, owned and verified fixes: triage meeting, severity context, ticket format, deadlines and retest.
Oct 18, 20264 min read
Security Guides
Pen test reports in due diligence: what to share and how to read one
How sellers should present penetration test results to a buyer, and how buyers should read a report: scope, age, retest status and open findings.
Oct 18, 20263 min read
Security Guides
Embedded payment forms and SAQ A: the script protection criterion
If your checkout embeds a payment form, SAQ A eligibility includes a script criterion. What the PCI SSC FAQ says and how to meet it in practice.
Oct 18, 20263 min read
Security Guides
Patching OT and ICS safely: prioritise, test, then schedule
How to patch industrial systems without causing downtime: rank by exposure and exploitation, test first, and use compensating controls when you must wait.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.