Security Guides
My device has no automatic updates: what should I do?
No auto-update option on a smart device or app? Install updates when notified, check weekly, ask the maker why, and decide whether to replace it.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
OAuth device authorization grant: when to use it and when not to
The device code flow suits TVs and CLIs with no browser, but it can be phished. How it works, the polling rules, and how to reduce the risk.
Oct 18, 20263 min read
Security Guides
Developer laptop offboarding checklist for leavers
What to revoke, collect and wipe when a developer leaves: accounts, SSH keys, tokens, recovery keys and company data on personal devices, in order.
Oct 18, 20263 min read
Security Guides
Windows Dev Drive and Defender performance mode: the security trade
A Dev Drive speeds up builds by running Defender in performance mode on a trusted volume. Here is what that trades away and when to leave it untrusted.
Oct 18, 20263 min read
Security Guides
How to detect when a log source goes silent
A quiet log is not a safe log. Alert on missing volume, stale timestamps and agent health so you notice when logging stops, before an incident needs it.
Oct 18, 20263 min read
Security Guides
Detecting secrets in CI with safeguard detect: redaction and severity
How to run safeguard detect for secrets in a pipeline, why values are redacted by default, and what to do when a real secret turns up in the output.
Oct 18, 20263 min read
Security Guides
Design review, threat model or code review: which do you need?
Use a design review for architecture, a threat model for what could go wrong in a flow, and a code review for bugs. Choose by when and what you can change.
Oct 18, 20263 min read
Security Guides
Deserialization risk compared: Python, Java, .NET and PHP
Which deserialization calls are risky in Python, Java, .NET and PHP, and what safe default to use in each, based on the OWASP cheat sheet and vendor docs.
Oct 18, 20263 min read
Security Guides
Exposure window: when it starts, when it ends, how to measure it
An exposure window is the time you ran vulnerable code that attackers could use. Here is how to pick a start and an end point you can actually measure.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.