Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
DORA Articles 24 and 25 require a risk based testing programme with independent testers and yearly tests of critical systems. The listed test types.
DORA Article 9 requires documented policies for ICT change management, patches and updates, access control and strong authentication. What each requires.
A data inventory lists what personal data you hold, where, and who can reach it. A simple way to build one for donor, student or client records.
Your domain controls your email, your website and password resets. A short registrar checklist for small teams covering ownership, MFA, locks and renewals.
A yearly checklist for company domains: registrar security, renewals, stale DNS records, email authentication, certificates and who can make changes.
DNS over HTTPS and DNS over TLS encrypt the link to your resolver. DNSSEC signs the data. They solve different problems. Here is how to choose.
The Safeguard CLI scans locally and uploads only SBOMs and findings, per its docs. See what stays on your machine and how to verify a scanner claim.
Rotating a KMS key changes new key material only. Old data stays under old material and a leaked data key stays leaked. Here is what rotation does fix.
Quantum computers threaten RSA and elliptic curves far more than AES or hashes. What NIST says about symmetric keys and why AES is not the urgent part.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
