Security Guides
Hardening container images for dedicated game servers
A checklist for dedicated game server images: small base, non-root user, no secrets baked in, pinned versions and a scan before each fleet rollout.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedSecurity Guides
When should a security team declare an incident?
Declare early. Google SRE guidance names three triggers: a second team needed, customer visible impact, or no progress after an hour. Applied to security.
Oct 18, 20263 min read
Security Guides
declarativeNetRequest vs blocking webRequest: what changed for privacy
Manifest V3 replaces blocking webRequest with declarative rules. What that means for what an extension can see, and the permissions to look for.
Oct 18, 20263 min read
Security Guides
DDoS readiness for a game launch: a four step plan
Before launch day, map what your game depends on, check your defences, write a response plan and rehearse it. A practical plan based on NCSC guidance.
Oct 18, 20264 min read
Security Guides
Should you run DAST against staging or production?
Dynamic scans send attack traffic to a running app. When staging is the safer target, when production scans make sense, and how to limit the damage.
Oct 18, 20263 min read
Security Guides
Cybersecurity testing FDA expects for a medical device submission
FDA lists security requirements, threat mitigation, vulnerability and penetration testing for submissions. What each includes and what reports should say.
Oct 18, 20263 min read
Security Guides
Cyber insurance for small nonprofits and schools: what to check
First-party versus third-party cyber coverage, and the policy questions to ask before you buy, based on FTC small business guidance.
Oct 18, 20263 min read
Security Guides
CWE-636 explained: when error handling fails open
CWE-636 describes products that drop to a less secure state after an error. What the weakness is, why it happens, and how to find it in your own code.
Oct 18, 20263 min read
Security Guides
Scoring incoming bug reports with CVSS: severity is not risk
How to use CVSS v4.0 on reports you receive: label the score correctly, add threat and environment context, and avoid treating base scores as risk.
Oct 18, 20264 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.