Security Guides
Next.js Server Actions and CSRF: allowedOrigins explained
How Next.js limits CSRF on Server Actions with POST only and an Origin versus Host check, and when allowedOrigins matters behind a reverse proxy.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Auditing a Next.js app: what to open first
A short audit order for a Next.js App Router project from the official data security guide: data layer, use client, use server, params and route handlers.
Oct 18, 20263 min read
Security Guides
Next.js data access layer and DTOs, explained
A data access layer is a server-only module that checks authorization and returns minimal objects. Why Next.js recommends it for new projects.
Oct 18, 20263 min read
Security Guides
New hire security training: a first week checklist
What to cover in a new employee's first week of security onboarding, in order, with timing and owners, so that access and training stay in step.
Oct 18, 20263 min read
Security Guides
New cloud account security checklist for the first week
A practical first week checklist for a new AWS, Azure or GCP account: lock down the owner, turn on logs, block public storage and remove long-lived keys.
Oct 18, 20264 min read
Security Guides
Why game servers must not trust the game client
Anything running on a player's device can be changed. Keep rules, economy and results on the server and treat client input as a request, not a fact.
Oct 18, 20263 min read
Security Guides
Why you should never multiply EPSS by CVSS
Multiplying EPSS by CVSS looks like probability times impact but is not. FIRST calls it score laundering. See why and what to do instead.
Oct 18, 20264 min read
Security Guides
Network Time Security (NTS) for NTP: what it protects
NTS adds TLS based key setup and authenticated time packets to NTP client-server mode. What it protects, what it leaves open, and what to watch for.
Oct 18, 20263 min read
Security Guides
Net vulnerability debt: are you closing findings faster than they arrive?
A shrinking backlog needs closures to beat new findings. Track weekly inflow, outflow and net change to see if your program gains or loses ground.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.