Security Guides
How do you keep security champions engaged over time?
Keep champions engaged by trusting them with real decisions, building a community, rewarding the work, investing in training and planning for turnover.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Runbook rot: how to keep disaster runbooks true over time
Runbooks decay as systems change. Tie them to owners, dates and real drills, and retire the ones nobody uses, so the page matches reality when you need it.
Oct 18, 20264 min read
Security Guides
Keep Claude Code away from .env files with Read deny rules
A Read deny rule stops Claude's file tools from opening .env and secrets folders. What it covers, what it misses, and why .claudeignore does nothing.
Oct 18, 20263 min read
Security Guides
Kafka TLS: ssl.client.auth required vs requested, and hostname checks
Why Kafka's ssl.client.auth value of requested gives a false sense of security, and why you should not switch off hostname verification to get TLS working.
Oct 18, 20263 min read
Security Guides
Kafka SASL mechanisms compared: PLAIN, SCRAM, OAUTHBEARER, GSSAPI
A plain comparison of the four SASL mechanisms Kafka supports, what each needs from you, and which fits a small team, a cloud setup or a Kerberos shop.
Oct 18, 20263 min read
Security Guides
Kafka allow.everyone.if.no.acl.found: when is it safe?
What allow.everyone.if.no.acl.found does in Kafka, why new topics are the trap, and how to check that your production cluster is not running it open.
Oct 18, 20263 min read
Security Guides
Kafka ACLs for producers and consumers: a least-privilege setup
How to give each Kafka service only the topic and group access it needs, using kafka-acls.sh producer and consumer shortcuts and prefixed patterns.
Oct 18, 20264 min read
Security Guides
K-12 cybersecurity: the free CISA resources worth using first
CISA publishes a K-12 report, toolkit, foundations package and procurement guidance. Here is what each is for and where a small district should start.
Oct 18, 20263 min read
Security Guides
JWT validation checklist from RFC 8725 best practices
A checklist of the JWT best practices in RFC 8725: fixed algorithms, issuer and audience checks, typed tokens and safe handling of kid and jku headers.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.