Security Guides
What do scanner terms like match, enrich and triage mean?
A plain glossary of vulnerability scanner terms: inventory, SBOM, purl, advisory, alias, match, enrichment, triage, reachability, VEX and baseline.
Oct 19, 20264 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
What do enterprise buyers see about your domain before the first call?
Reviewers often check public signals first: email authentication, TLS, a security.txt file and a clear security page. Check them on your domain.
Oct 19, 20264 min read
Security Guides
What do COOP and COEP do, and when do you need them?
COOP and COEP together make a page cross-origin isolated. Learn what each header controls, which browser features need them, and how to roll them out.
Oct 19, 20264 min read
Security Guides
What do advisory IDs like CVE, GHSA, USN and DSA mean?
CVE, GHSA, USN and DSA identify different things: a vulnerability, a GitHub advisory, an Ubuntu notice and a Debian advisory. Learn which to track and why.
Oct 19, 20264 min read
Security Guides
What data goes into an EPSS score?
EPSS uses about 2,850 daily features: exploit code, chatter, CVSS metrics, age and references. Plain definitions of each group and what it cannot see.
Oct 19, 20264 min read
Security Guides
What data does a security platform store about you? A request list
A security platform usually stores more than findings: metadata, code snippets, user data, logs. Here is how to ask a vendor for a complete data inventory.
Oct 19, 20264 min read
Security Guides
What data does a dependency scanner send out of your network?
Before a dependency scanning PoC, find out what leaves your network: package lists, source code, or metadata. Questions to ask and a way to verify it.
Oct 19, 20264 min read
Security Guides
What CVSS score counts as Critical, High, Medium or Low?
CVSS scores map to None, Low, Medium, High and Critical bands, with Critical starting at 9.0. The full table, what the bands mean and how to use them.
Oct 19, 20263 min read
Security Guides
What counts as triage history when you switch dependency scanners?
Triage history is the set of decisions, reasons, owners and dates attached to findings. Here is the field list to export before you leave a scanner.
Oct 19, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.