Security Guides
Mobile app security vs web app security: what really differs
Mobile and web apps share server-side risks but differ on where code runs, how data is stored, how updates reach users and what the user controls.
Oct 18, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Mobile game security checklist built on the OWASP MASVS
Use the eight OWASP MASVS control groups as a review checklist for a mobile game: storage, crypto, auth, network, platform, code, resilience, privacy.
Oct 18, 20263 min read
Security Guides
Why mobile client-side checks must be repeated on the server
A mobile app runs on a device the user controls, so any check inside it can be bypassed. What to enforce on the server and what app checks are for.
Oct 18, 20263 min read
Security Guides
A pre-release security checklist for mobile apps
A one-page pre-release checklist for iOS and Android apps, organized by the OWASP MASVS groups, covering storage, network, auth, code and privacy.
Oct 18, 20263 min read
Security Guides
Mobile app release security checklist before you submit to a store
Eight checks before submitting a mobile app: signing keys, embedded secrets, local storage, transport, permissions, SDKs, debug flags and update plan.
Oct 18, 20263 min read
Security Guides
Where mobile apps leak data without meaning to
Mobile apps often leak sensitive data by accident through backups, logs, caches and screenshots. A checklist for the leaks MASVS-STORAGE-2 targets.
Oct 18, 20264 min read
Security Guides
ML-DSA or SLH-DSA: how to choose a post-quantum signature
Both are NIST signature standards from August 2024. A decision guide on lattice versus hash-based signatures for code signing, firmware and documents.
Oct 18, 20263 min read
Security Guides
Mixed content: why your HTTPS page still breaks
Browsers upgrade some insecure sub-requests on HTTPS pages and block the rest. Which resource types fall in each group, and how to fix mixed content.
Oct 18, 20263 min read
Security Guides
MITRE ATT&CK tactics, techniques and sub-techniques explained
ATT&CK names attacker behavior as tactics (why), techniques (how) and sub-techniques (more specific how). See how to read it and how defenders use it.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.