Security Guides
Outage or attack? How to tell in the first hour
AWS, Cloudflare and the Iberian blackout looked like attacks at first but were not. A short decision guide for telling failures from intrusions.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Over-the-air update threats for vehicles: spoofing, replay, rollback
Over-the-air updates give cars new attack paths. Learn the main threats, including spoofing, replay and rollback, and the controls that address each one.
Oct 18, 20263 min read
Security Guides
OT security in the first 30 days for a small manufacturer
A four week plan for a small plant with no OT security program: find exposure, take inventory, fix passwords, control remote access, segment, and rehearse.
Oct 18, 20263 min read
Security Guides
OT perimeter firewall rules: industrial ports named in CISA advisories
Industrial ports named in CISA advisories, including TCP 102, 502, 20256 and UDP 1502, and how to review firewall rules so they are denied by default.
Oct 18, 20263 min read
Security Guides
OT devices with passwords you cannot change: compensating controls
Some OT devices have credentials you cannot change. CISA suggests compensating controls: enclave segmentation, extra logging and strict access paths.
Oct 18, 20263 min read
Security Guides
OS command injection: why avoiding the shell beats escaping
Escaping shell input still allows argument injection. Prefer library calls, then argument lists, then strict allowlists. Here is how to review your code.
Oct 18, 20263 min read
Security Guides
What order to adopt security scanners in, over the first year
A sequence for adopting SCA, secrets scanning, container scanning, IaC scanning, SAST and CSPM, with the reason for each step and when to move on.
Oct 18, 20263 min read
Security Guides
Age of open findings vs time to fix: which metric to track
Time to fix only counts closed items. Age of open findings counts the ones nobody has fixed. See why you need both and how to chart them together.
Oct 18, 20263 min read
Security Guides
Open source or commercial SCA: a decision guide
Open source SCA suits small technical teams that run their own pipeline. Commercial suits teams needing support, scale, and reporting. A decision guide.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.