Security Guides
Express helmet and X-Powered-By: what they actually do
What helmet sets by default in Express, why hiding X-Powered-By only deters casual scanning, and why a custom error handler matters more than most expect.
Oct 18, 20262 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
Expired TLS certificate: a recovery runbook for the first hour
A certificate expired and users see errors. Confirm it, issue a replacement, deploy it everywhere, and find out why renewal failed, in that order.
Oct 18, 20264 min read
Security Guides
Probability times impact: where expected loss ranking breaks down
Ranking vulnerabilities by probability times impact is a useful start. See a worked example, where it misleads, and how to handle uncertain inputs.
Oct 18, 20263 min read
Security Guides
A 30 minute security briefing for executives that sticks
Executives face targeted fraud and make incident decisions. A 30 minute briefing outline covering the threats, their role and a short tabletop exercise.
Oct 18, 20263 min read
Security Guides
Evil twin access points: how they work and how to prevent them
An evil twin copies your Wi-Fi name to trick devices into joining. Learn what makes it work and which controls stop it in offices and on the road.
Oct 18, 20263 min read
Security Guides
Evaluate a native app before installing it: a security checklist
A practical checklist for judging a desktop app before it goes on a work machine: source, signing, checksum, permissions, update path and data handling.
Oct 18, 20263 min read
Security Guides
How to evaluate a breach report: six questions to ask first
A calm way to read a breach report: who says so, what was accessed, which dates apply, what is unknown, and whether the story touches your data or systems.
Oct 18, 20263 min read
Security Guides
EV charging security basics: OCPP, ISO 15118 and Plug and Charge
How chargers talk to back ends with OCPP and to cars with ISO 15118, where TLS and certificates come in, and what makes Plug and Charge more secure.
Oct 18, 20263 min read
Security Guides
EU drone class marks C0 to C4 and who must register as an operator
C0 to C4 class marks set weight classes from 250 g to 25 kg in the EU open category, and operator registration depends on class, weight and camera use.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.