Security Guides
DMARC none, quarantine or reject: a safe rollout plan
DMARC policy options explained, with a staged path from none to reject so you stop spoofing of your domain without blocking your own legitimate mail.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
DMARC alignment: relaxed versus strict, with examples
DMARC passes only when SPF or DKIM passes and the domain aligns with the From address. See how relaxed and strict alignment differ, with worked examples.
Oct 18, 20263 min read
Security Guides
DKIM selectors explained, and how to rotate a signing key
A DKIM selector names which public key verifies a signature. Learn how selectors work, why they make rotation safe, and the order of steps to follow.
Oct 18, 20263 min read
Security Guides
DKIM key size: is 1024 bit still acceptable, or use 2048?
RFC 8301 requires DKIM signers to use RSA keys of at least 1024 bits and says they should use 2048. Here is what that means and how to publish a long key.
Oct 18, 20263 min read
Security Guides
Django user uploads: a security checklist
How to accept file uploads in Django without serving a malicious file back: size limits, extensions, a separate domain and why image checks are not enough.
Oct 18, 20263 min read
Security Guides
Django raw SQL: safe parameters versus string formatting
Django QuerySets are parameterized, but raw(), cursor.execute(), extra() and RawSQL are not safe by default. Here is the one rule that keeps them safe.
Oct 18, 20263 min read
Security Guides
Django HTTPS settings in order: redirect, cookies, HSTS
Which Django settings turn on HTTPS properly, in what order, and the proxy mistake that can quietly break CSRF protection. Short and practical.
Oct 18, 20263 min read
Security Guides
Django check deploy: what to fix before you go live
Run the Django deploy check against production settings, then fix SECRET_KEY, DEBUG, ALLOWED_HOSTS and secure cookies first. Here is the order to follow.
Oct 18, 20263 min read
Security Guides
Django ALLOWED_HOSTS and the Host header, explained
Why Django requires ALLOWED_HOSTS even when your web server checks hosts, and the two ways your own code can accidentally bypass Host header validation.
Oct 18, 20262 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.