Security Guides
Holiday change freeze: security checklist for on call teams
Before a holiday freeze, confirm on call cover, patch status, expiring certificates, alert routing and a rule for emergency changes. A one page list.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
How to test a detection rule change without fooling yourself
Tuning a rule on the same alerts you judge it on overstates the gain. Use a holdout window, a baseline, and a rollback plan. Here is a simple procedure.
Oct 18, 20263 min read
Security Guides
A short history of CVE IDs and how the numbering works
The CVE system launched publicly in September 1999. Here is the ID format, who assigns IDs, and why the program's funding made news in 2025 and 2026.
Oct 18, 20263 min read
Security Guides
HIPAA transmission security: protecting internal traffic too
HIPAA transmission security covers ePHI sent over any electronic network, not just the internet. A checklist for APIs, queues, files and internal links.
Oct 18, 20263 min read
Security Guides
HIPAA emergency access procedure: designing break-glass access
HIPAA requires an emergency access procedure for ePHI. Here is how to design break-glass access that works in a crisis and still leaves an audit trail.
Oct 18, 20263 min read
Security Guides
Stopping help desk social engineering on password and MFA resets
Attackers phone the help desk posing as staff to reset passwords and move MFA. Controls to design so a convincing caller still cannot take over an account.
Oct 18, 20263 min read
Security Guides
How a missing length check in Heartbleed leaked server memory
Heartbleed was a missing length check in OpenSSL's heartbeat code, not a flaw in TLS itself. Here is how one small bug exposed keys and passwords.
Oct 18, 20264 min read
Security Guides
After a memory leak bug like Heartbleed: what to rotate and why
Patching is only step one when a bug leaks process memory. The cleanup order the Heartbleed guidance implies: keys, certificates, sessions, passwords.
Oct 18, 20263 min read
Security Guides
HICP 2023: healthcare's five top threats and ten practices
The HHS 405(d) HICP 2023 edition names five top healthcare cyber threats and ten practices. Here is the full list and how a small clinic can start.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.